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"}, {0x110, 0x1, 0x80, "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"}, {0x10, 0x111, 0x6}, {0x110, 0x10a, 0xfffff001, "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"}, {0x98, 0x103, 0xcb, "3308b4d8bb0acc92ecdd6c04559821054f5113fe3eb00c5e0e2b560fae30c45f268edd5205fd38c2e7ad889ea97368422ac79060bc2ffb6b13116956d721297ba529be9c51984453c5d96fdce95f45889aabef98c619e4c02a9e1782ee25b5a937e7c9fd5dfb710ea9c02a6f77b8a80e8ce274b3f3d8d280f8faa6ee0b31914a60"}], 0x12d8}, 0x24000004) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000040)=@default) 18:54:44 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:44 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa8, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x10}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x18}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfc00000}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x2a}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x40080) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fa2b60862d428ed0e7225b21d61c000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="0100000000000000000067000000080001002700000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000400c500"], 0x34}}, 0x0) (async) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fddbdf250c0000003000018008000b0073695600080005000300000014000300e000000200000000000000000000000008000b00736970000800060009000000280003800500086db852623f8b8c7e6db55a59a4478858404c3c5b20f4a98f0a01010114000200776c616e31000000000000000000000014000380060007004e2000000800030004000000887ebb2575aa10b22a50792c06963e93bae377bd939874e85f193da9a0458032fdbf47225cb01d63c40032e69f332582d8"], 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x44080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) ioctl$HIDIOCGREPORTINFO(r6, 0xc00c4809, &(0x7f0000000280)={0x1, 0x3, 0x4}) 18:54:44 executing program 3: syz_clone(0x4404013a, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:44 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) (async) 18:54:44 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000000), 0x15) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) sendto$rose(r0, &(0x7f0000000080)="be05be3ed3046eaa77deeaf34c4cf49e5f23c48598348fd2da09ef520573445eb9b10eb17dcd3d3a0fd0ba77fd7bb92d83618939d9c8dca74b3da22e8257f2192755fad0d03fdb866176701975ebbfb7159f110fde1afa7d32e002f0a47b6e5343ef1c3a6e6e32e28a0d3fe4ea2b2f8783fcae81aaaeee20c1c18232ff117a75f12d3190e49e06adbfd2a64117b0ac74e79b6d051caa86e1e408ca3cb54a196a932c88f1983f10dc22", 0xa9, 0x8044, &(0x7f0000000140)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c) r1 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000001680)={&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="883cba73595a99b5a2922b79db472ab009a1fb46bedd8c59b9d344465ed993a3ed25f9eae1c5f86053c7243d7710a7a7324e453678523e8ebfdb7f53b35c5dd643de854536339063d17dd767536009b36a2ee2ef815bfb479fd3742712142c685d94d5488e8bea356d420637664bbc4be48192b586d265d64a03b584ba106fbb3a90284f9a25d40421069ac299086e6c4cf1d815feec506e58eea1fdc925e45ee5460f5e0a098df489bcb2cd192245742228ac6d82046546004838805db9d159da864b2533396d2b04f281e4b95344806710922992b304ade21d7dec87704657d33086b0bc7f088a1d39", 0xea}, {&(0x7f0000000300)="41965849d4cc76f650fccc809021a55500b3ae42b17d283d8ec4543160f42addbdfb", 0x22}], 0x2, &(0x7f0000000380)=[{0x1010, 0x0, 0x4, "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"}, {0x110, 0x1, 0x80, "3caade78df253255210335d7c548296819e50cae22b33e0b895bbcbc0c01bf2941a923e80868649c84b763c88a3e32f81893b62abe4a194d09cb49395384ed8097f1d7388378401fc99677e96c719978eb7b2065c77cc401048fbb1e4fb3e569209ef0ae594d3849e99ef2f7fbdc04cd67aa3feed4aceefdaff97c0a4f9a919b3e00135b15a148cb253bf214e0662cab22e53e2f419c455f3d56e07383cea8828132894b1e571f547d8ea973b3cdec2a42cfc81ff1f007c35e5dc708de7428a0d7e1a38e4ddddc4a7116dc996dc281bfed9f52267e58d66dd10a3a64bc130a6ce9c02c4b54eac25dd96d0420f4a820f151352e50e666bb6e4c50ed5ad891"}, {0x10, 0x111, 0x6}, {0x110, 0x10a, 0xfffff001, "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"}, {0x98, 0x103, 0xcb, "3308b4d8bb0acc92ecdd6c04559821054f5113fe3eb00c5e0e2b560fae30c45f268edd5205fd38c2e7ad889ea97368422ac79060bc2ffb6b13116956d721297ba529be9c51984453c5d96fdce95f45889aabef98c619e4c02a9e1782ee25b5a937e7c9fd5dfb710ea9c02a6f77b8a80e8ce274b3f3d8d280f8faa6ee0b31914a60"}], 0x12d8}, 0x24000004) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000040)=@default) setsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000000), 0x15) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) sendto$rose(r0, &(0x7f0000000080)="be05be3ed3046eaa77deeaf34c4cf49e5f23c48598348fd2da09ef520573445eb9b10eb17dcd3d3a0fd0ba77fd7bb92d83618939d9c8dca74b3da22e8257f2192755fad0d03fdb866176701975ebbfb7159f110fde1afa7d32e002f0a47b6e5343ef1c3a6e6e32e28a0d3fe4ea2b2f8783fcae81aaaeee20c1c18232ff117a75f12d3190e49e06adbfd2a64117b0ac74e79b6d051caa86e1e408ca3cb54a196a932c88f1983f10dc22", 0xa9, 0x8044, &(0x7f0000000140)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c) (async) socket$kcm(0x29, 0x7, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000001680)={&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="883cba73595a99b5a2922b79db472ab009a1fb46bedd8c59b9d344465ed993a3ed25f9eae1c5f86053c7243d7710a7a7324e453678523e8ebfdb7f53b35c5dd643de854536339063d17dd767536009b36a2ee2ef815bfb479fd3742712142c685d94d5488e8bea356d420637664bbc4be48192b586d265d64a03b584ba106fbb3a90284f9a25d40421069ac299086e6c4cf1d815feec506e58eea1fdc925e45ee5460f5e0a098df489bcb2cd192245742228ac6d82046546004838805db9d159da864b2533396d2b04f281e4b95344806710922992b304ade21d7dec87704657d33086b0bc7f088a1d39", 0xea}, {&(0x7f0000000300)="41965849d4cc76f650fccc809021a55500b3ae42b17d283d8ec4543160f42addbdfb", 0x22}], 0x2, &(0x7f0000000380)=[{0x1010, 0x0, 0x4, "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"}, {0x110, 0x1, 0x80, "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"}, {0x10, 0x111, 0x6}, {0x110, 0x10a, 0xfffff001, "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"}, {0x98, 0x103, 0xcb, "3308b4d8bb0acc92ecdd6c04559821054f5113fe3eb00c5e0e2b560fae30c45f268edd5205fd38c2e7ad889ea97368422ac79060bc2ffb6b13116956d721297ba529be9c51984453c5d96fdce95f45889aabef98c619e4c02a9e1782ee25b5a937e7c9fd5dfb710ea9c02a6f77b8a80e8ce274b3f3d8d280f8faa6ee0b31914a60"}], 0x12d8}, 0x24000004) (async) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000040)=@default) (async) 18:54:44 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001100)={&(0x7f00000000c0)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x26}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x899d}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffff000}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8841}, 0x4000) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x483, 0x5d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000000), 0x4) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x601f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x41}, 0x90) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r0}) 18:54:44 executing program 4: syz_clone(0x4404023c, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:44 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000000), 0x15) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) sendto$rose(r0, &(0x7f0000000080)="be05be3ed3046eaa77deeaf34c4cf49e5f23c48598348fd2da09ef520573445eb9b10eb17dcd3d3a0fd0ba77fd7bb92d83618939d9c8dca74b3da22e8257f2192755fad0d03fdb866176701975ebbfb7159f110fde1afa7d32e002f0a47b6e5343ef1c3a6e6e32e28a0d3fe4ea2b2f8783fcae81aaaeee20c1c18232ff117a75f12d3190e49e06adbfd2a64117b0ac74e79b6d051caa86e1e408ca3cb54a196a932c88f1983f10dc22", 0xa9, 0x8044, &(0x7f0000000140)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c) r1 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000001680)={&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="883cba73595a99b5a2922b79db472ab009a1fb46bedd8c59b9d344465ed993a3ed25f9eae1c5f86053c7243d7710a7a7324e453678523e8ebfdb7f53b35c5dd643de854536339063d17dd767536009b36a2ee2ef815bfb479fd3742712142c685d94d5488e8bea356d420637664bbc4be48192b586d265d64a03b584ba106fbb3a90284f9a25d40421069ac299086e6c4cf1d815feec506e58eea1fdc925e45ee5460f5e0a098df489bcb2cd192245742228ac6d82046546004838805db9d159da864b2533396d2b04f281e4b95344806710922992b304ade21d7dec87704657d33086b0bc7f088a1d39", 0xea}, {&(0x7f0000000300)="41965849d4cc76f650fccc809021a55500b3ae42b17d283d8ec4543160f42addbdfb", 0x22}], 0x2, &(0x7f0000000380)=[{0x1010, 0x0, 0x4, "0884c53d7d49a36564efa0fa7ac6d57a3ad814abd3513cd67bf86329403a18d1d2c81e006a70201135e67a061532b6a0fe9bf772379ad9bf3dc4174ac13a1836bc21350281c5932727c387e861f37a2715c889619acb6aafe451fa93f37200440a6bb967c2c26c8502d3c703366dc73b1deea0419544807a540e6933bdd2154b3f6645a97b1dac50127aa57ef2ba77dbd791028ba923e83de161fba71bdeb6829e58fdccd69998c5e36ec31c5c9f5a475f77b44e8cbb893bc9afa8c06ff40fbc532885260b754f7614bde28b30dfccfe96355e671995b2b9b0cef97d7b4a6b8c5ec04843171b7b0e8da6fc70b41bfe26c1ff8794934a7bb9de87a82fe75de9e5c31cced80b33ed13676f5eb7f6bb9801a5e15ba5edb475ca1cc48014ab2a542a193cc8f2b84133614b9f108ea886e4c4e03fbd9f818302d79456f5a2fe3d2623666d8580aef20e331ad77abaddedb3f47ee6d23fa47c0c5105b41d40bba63ad800a96b778693b64b75dcb24d5b18b07854b212ecb508f9e4d7406286deb5c17b977ac4e3201b89b7aee5713bb0943a68ab4919b0d75d0d2eab0ec2455266e189ef03fa5f207e6b77c9cb9768e921161dcd5ba3e24d684f1f9848440d2012241458cf32eedfb40a23609db3c9c709b6a8c4c294d218e38a4e62652b3b79d2dd95247a9444ad28f4bdc33dc282392d1884afa4356a6bc389fd12f3ecfcb9ec9c5ce09358611bde6faff34bb3ac216942a239079d35e89d5d80c66b1c41d574a72071ec392ed574643249244e9e4ea7a5766caf9412c685b829b1486c901fc92c39c594eeff51ffac406659ab2602f36703e16256d9322e5cfd1048cfa15f04efbc7844244f8947e27141a6af9707902174b115553fc8c3693244d906f38873e9824073b27c5cd51a2eca524777b99556bf178fedfc7ef9dbc67bc5303375c9cbf689e14c9b766a8535f233f62338cc8df7517964942b8b2e4fc9c35f8adbea66208887c266a4baee51f3604b7a7be84d4102f810c832602e5f32cad0719cdc54f60f0a6b10f0c5339dc808e41ef5f1adb42727063d679666d51ebee5dd61f0b0b7dcad710c0304896d6bd510499c1334fbd394e2e41da419385f9b0c22a0302595cbbf2ea8aa3813713da9f74c20a2733d55d05353c4882d140043a1cae9ba340337b5f3ac2d429345d0aeb920ab1ef0ed394c298249ccb88ac70e889384ebd82a20af3a610c1f41c36d6effc65cf805959dd3e91104fe12fe35c1bb5bc25cbb3ab179070d81fc24b5d15468af7a6c37c9c2fd1234005fadae85bff446b5e0b8bc2c9d109cef8c2df59df57f0d2028bd4add5c21f11782bb8be91074b1c972a58ea0bdf1eb28e2d7a42c7c11baa28b62bbd29a73776e9d9ec69255e62a303c63e5bcc7db31e4bc17dc45a3058106d644004029ba436efdf4dfab8a4d3684d67a9db7218727bcd30d2fa1b527ceff770d7e12808fbf74522422b6b0e3305bc1278cca0683c29827c87ad61265d42b57d9ea586091468c358676d669e4701efd3797b8ea15017cb845f052c2c6dbf8013ee3a86d1f5f70b73fa538bdaa720d477ad08191ae4460b87cabd67bbba9fcc68e1232bde423fe6a9f082f89b0d53a03187781d702bf8568305c228460090267d228ea468bce933925d6fe3ee58778a6a6fd5eb0fc6333ad9f130730e6f7391de3991e837642ca4b8a3d3d6d97df1110e5368e01acaa39faf3fd3199a77b42eae756a3f5fdb9af92141b7d336f992d8c0ea32e8517d04d88cb6818dacda0bf87fc7b75aac4592bc08293a275d77a4ad1cdcee28cc430adf332e613a1ae860311cdcc171cb6b2b2eb23d6f3004002b966989505d4e6337963a41782012b5e19a8032a85dbcfb522c787fa44a78402b0804de8f4c370820cc0d34f7eba87d961ccb15fbfbf287c97e28d63af37a027cba9b81b9019792363f925ab7b4906478542434e656376cbe97af1db47e39d5bda225c5ad160668f5b12dbddb126d6d077ad416e48d52ac647b37d309fc44f49c3366b0addddf2b910277ff684b75e90a66994e04987324630eb3867228fc46ae31248044859e483610c0ff7ac3d33f3d717a5830a7812b0a84bf829beecf469d7fe2598d0ab037fb5d447e56fe5e2e9066556d0a141b91830fb3650280c208380774329188546b3e658b520892283f8a3081caa2b037ddcb3697e1cf7875377f9a8a06d8a0808de958a8f505204bbe38e1c216b30794c55d11729376d692c5b9b7d8ebff2610db4713aa3cc9d49288ad9f5808e11ae07de8000a07fdaccf10cafdc6a698046e6e450a4122f19d6069f9fd827cb9c20d8ee76881cdb5b5e796108adcf0e55e8250ff3b1f4c8eeacb7c9b3b30cb4ba63a7f2c5e288b2479597f5cdaf45fa585dd6a67f8ca3cff3659f484b021a1377fd3c62714fcdb8b32f296cd8213a1572f8cc93ffad970fe2dd39c03171247ac22d7ce3ed01143f815c136ef6ef8f275a0c379819d9a71bae1ff6f6d1aa260fde5b7997b9dbaa4623546d5b90ac63b4809ea5edc6cf0f3d810e035aa0631062ac8ec711ff7096f38e20019408883eaaabd7adb6d6a666b0b59e029662e0ff436388c2b770a9a50d83c29ee96f9cbf50f0484a99dd9c8041123a09ebe298f8036ab6ba3874f4cd454275c4735ca6c4621ad6dfb4d2b3e7b3218853f41e7da9818536f999d0737b06305ad9bf06376e2d9f835351511b9f9fdc86bd930a0cd854ea249e47d67aab396f72ae6849019b00782ae5b3b39831076ccf6ff9c17f0e04b980da6e890df05207938d6af1041eab2cf121a05c96fa4901b977afae1c6f9f79e8c3b50ef088def2803913e38eccf6da28bcd8f5c8dfc565572c8b1c385ed7fd84d37e4b960a47dffd68ba2d3cb404edd01589be38d12ffd82e514c4258dad3bb3e4d5d9fe3631cd4579e66ce86859bc9012291d0e684231c113d8acae0b4823be885602ced0259ca908da948778cfee6607788bb88e15f366aca44ec56c6091aa617a9513eda84d32bd896226c11088b06aa1912a155767c56d677b7850f06598b3931e51cfde3a75004c9dbeeb33898d148e235fc3ce0aeb3d67db27a29ea6ecd824687a530c0809e2591099cccab5f7d80f827a47498398fd875eca8fadaf7f0965b453180cd45edb1fd62ce88f4ba0652a129c3c0a290d332c4318cfbacb04df9728787156a77b1b805c7d2ac5889ef7b66603b9768ba949ecc6ef438659811b82bb7d7a265bfd4dfa3b6232b634d42b530aef65fdac7e46b4bc484f2c01293287d98cf1845e26eebe35ff3affa50847e383700d190f0606ab5890622a863874ff2b324de99e44300ac83bd666555a56a12faaea7e4492a0d984bb97572b68fdc05336feb26961c13c51b27aedff3697274aa4516fb7518c5eed73896d9f50c16911271da377695a76f0ba23fcc7134f89398401857d3d0b632d9c024ebb4c458437c96d4690a8d4ad049a7793e7f186b5c1e9bb654712f4c4f1089c368170304d044fc089bf470b592e222caa848f34db189b0739952752f99c7fae6ec5443a359d8ea26c6402cc3963b1466f3e1f5530b3c7184edc650e268c35d114e926e6ce31123c28e93a1193ed62f0bcb03f34cf1bed85e7f5caf70f794a67eb370e42b560fb426c9139e937b8dbf37b1d22c98f1dd4d5f23ed6d59cdaa59eb4e768bd55d40b4fff99481aea3924873d53431169c80af8b341cacf4c422613d3eb29d8a2373af1c97cad4cce1538bf842741f1bcf92565fb354f758661de5fb6a1e30c702581d51eb53138f94656cd45feb179df7779694e648b410625fb0346ba506952580aaa9e2f85179feba56bf1b5c3c4d03cc6de60ac3d4d237371fb093d486b1bc9af910997059b57ebb31925e6eb11c17719a7284e2cae87d27e1392433722522de87a41ae9573f0b887b337fbdad25d95605cad58a16aa8610650ed5b1643beab06d42057bebf1fbf58ff870cc2366948785bbfc0e6c2705d7d10a03cb9a4e82233f95946d0e9cd3b62d9b28b9c3954519c056b7ac5662c508796bf80fcbaf2088f2a7d6e5a563219046a2752df1f24588d82dba9e235e0da7cabe0be6fc5cce6433053b18ec50bae74dc47a7167ce3919d389d48c26109166464c0ae5ac8cb48eaaac421230dab859cdd04bee8c78fe1339ae425bcdc918aa980537e72b1a412c563079395960942fb6259a011f199fc4288ef30cf5e9c5a82fd9759b28417073a7848c16e799ed5ed5ffa3fd56fb6bf1b1f495b246389ca7421b975a85423e995bc1f91a8a39e42f57adaa592c05cd72e6df77fbaf9a08cbad66f84415e092702a7ed562c4f6e43d99937dee2cc05a7676b1b324b83b1275b8e80f73c0f3bb808021b07cc3ff0928a27942f7095bd84296d8e8098ca864ce9d09ff6c5d2d6e2f309696e46ffcadd96f6d4ded52d6dba20dd06e27c80e267eb19544d39ae503695b66b15bb762343ca385b1ff33ee0b96c2b251ea89d3e5515601356e9cbdcded30ac9d731fa19e40ae082e377eae59f1ddde99af7c0e7512450c56c7b3e9b9b3133332d3fa615b611e6d4968fdc7aae0a79a4d263e1d93055cf4d8379b328d3ed0b059c7d9d74d5190624d84b6e7d3d6c35ae9737f4db7c34a401de4c4595379439d47a931da9df98ba1f6bee88cc9c53e321abd2afc89a463c352a0fe5196682cc9d7d9659e446f8ac8b3248129bcf0563542aa350c2e03ee2d77f4afd95b439700320cea36e644181746c09fe875460305047b553116fa51d6acc52c3c2a6fe6b1c24f488830e0021cc79c82367373fa0610bd8ee61d02e8352ea2194d8738e4035c5a29c403a6772251684a2f6c992547652d82bd4a0536b7515c4dc6113b2c571f60875d9a12ec7ebb08f3e1d79e43e848f3d5e4ba17ac9607e9d6af274c99a4b43f129daecbb4ba3a58c9f96291d0cdc166220809261f1a5435c5cc3bddf5e2a32976e904d0c9d7764ff5d44c60c8b54c8fe86b4d93adab47fa016b768e73157d1a5e27a78593962e9a5db27c8d1795e905624a75260eb39921c939a91ff5a77b641dcf1c4fc9fdc461ca9e15bef71fd6cdb32b467448f053eb66019d6484d24c3a44126b03f3922acef00bcb0d382cb2884586de385faf61dc02de71c117fc1f8eb549507ea80c2fd8cae9bf114f6ead61d95153de46fa50dd7d14a6adf2cf78e5a47313a6a656234b7273c3fdfaa73804853c39bc8e86a6226bf5bffcbad5b4392c8be5ec7e89be5ab82618a8141450ac18ec2c271cdbeb182662110834dadcb8e073ce2984fa736ab0b241252d07dc8c4d391c5061099dd53dcd62cdf8922978c85634bcbbd1198823c152fe9047cd2d0d6c3a6ae20f46130dc3b18d0d56385c3176bbeb9bcbd2c6985b6d445d0cc4e928c339ec91fa5de28417758fb05a69e376cdbb8393482c86f9742a50ba42dda981a0c47944a2256fa447dcf67f40e7a0a5007ce6e686851ad349d860bf6e55bb880be5a5440186ef2843751eaa8fd5f452d37069ea566e5a58dca3b00322a94a8b4efdb431fabd2e2a6151dbeb173813002dc0eea70a2ed1f73a150cd33579ade1d27701d41e5ac324cdb76b0e2cb4223b7b8051c3d547460ae14bc301bf51196a438647c31b4eda96e295ff69d653993449cc2e43d4686d5ea9d61b1e45985baf0d86a66ea3ac8cb847fb35387962064040ef8382c271e804aa5688156dbfac36125b7b740d2d675e350c8f45afb8448a977f26e99d184a04d561f575565a0e40eb9e6871a3a5b975bfa7f6f9113bd786c79efea6dc4"}, {0x110, 0x1, 0x80, "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"}, {0x10, 0x111, 0x6}, {0x110, 0x10a, 0xfffff001, "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"}, {0x98, 0x103, 0xcb, "3308b4d8bb0acc92ecdd6c04559821054f5113fe3eb00c5e0e2b560fae30c45f268edd5205fd38c2e7ad889ea97368422ac79060bc2ffb6b13116956d721297ba529be9c51984453c5d96fdce95f45889aabef98c619e4c02a9e1782ee25b5a937e7c9fd5dfb710ea9c02a6f77b8a80e8ce274b3f3d8d280f8faa6ee0b31914a60"}], 0x12d8}, 0x24000004) (async, rerun: 32) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000040)=@default) (rerun: 32) 18:54:44 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001100)={&(0x7f00000000c0)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x26}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x899d}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffff000}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8841}, 0x4000) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r2 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x483, 0x5d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) (async) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000000), 0x4) (async) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x601f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x41}, 0x90) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r0}) 18:54:44 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) (async, rerun: 64) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 64) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:44 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001100)={&(0x7f00000000c0)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x26}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x899d}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffff000}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8841}, 0x4000) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x483, 0x5d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000000), 0x4) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x601f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x41}, 0x90) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) (async) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001100)={&(0x7f00000000c0)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0x26}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x899d}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffff000}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8841}, 0x4000) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) syz_io_uring_complete(0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x483, 0x5d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) (async) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000000), 0x4) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x601f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x41}, 0x90) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r0}) (async) 18:54:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c06000091d10ac72d89950d0f3e6f013bad026a67ed24a77b06d2a087c2c019f6f3e2ad6735b8d13dc8535b9efbbdb06231c2926234cda365adfbc44bc39dc7f90cc4fb6a0325fdb336ea2d6d2580ba6cfdfc7d19020ac0e4b836feb1c3032b27eda3dd95c45976381a77", @ANYRES16=0x0, @ANYBLOB="06012abd7000fedbdf250b00000008000500fd5e000008000600ff7f000014000280080005000700000008000500ff01000008000600060000000800050001000000"], 0x48}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4004) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) setsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000000), 0x4) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa4, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbef}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xa4}}, 0x20000004) 18:54:44 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r1}) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) syz_io_uring_setup(0x34b0, &(0x7f0000000040)={0x0, 0xeae1, 0x10, 0x2, 0x1a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000100)) syz_io_uring_complete(0x0) socketpair(0x11, 0x80000, 0x7, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4010043}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc361}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xedec}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x814}, 0x4) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r9, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x1, 0x59}, @void, @val={0xc, 0x99, {0x8, 0x62}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r5, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x60}}}}, [@NL80211_ATTR_PRIVACY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4000001) ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f0000000380)) 18:54:44 executing program 5: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa8, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x10}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x18}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfc00000}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x2a}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x40080) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fa2b60862d428ed0e7225b21d61c000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="0100000000000000000067000000080001002700000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000400c500"], 0x34}}, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fddbdf250c0000003000018008000b0073695600080005000300000014000300e000000200000000000000000000000008000b00736970000800060009000000280003800500086db852623f8b8c7e6db55a59a4478858404c3c5b20f4a98f0a01010114000200776c616e31000000000000000000000014000380060007004e2000000800030004000000887ebb2575aa10b22a50792c06963e93bae377bd939874e85f193da9a0458032fdbf47225cb01d63c40032e69f332582d8"], 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x44080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) ioctl$HIDIOCGREPORTINFO(r6, 0xc00c4809, &(0x7f0000000280)={0x1, 0x3, 0x4}) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa8, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x10}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x18}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfc00000}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x2a}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) (async) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x40080) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fa2b60862d428ed0e7225b21d61c000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="0100000000000000000067000000080001002700000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000400c500"], 0x34}}, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fddbdf250c0000003000018008000b0073695600080005000300000014000300e000000200000000000000000000000008000b00736970000800060009000000280003800500086db852623f8b8c7e6db55a59a4478858404c3c5b20f4a98f0a01010114000200776c616e31000000000000000000000014000380060007004e2000000800030004000000887ebb2575aa10b22a50792c06963e93bae377bd939874e85f193da9a0458032fdbf47225cb01d63c40032e69f332582d8"], 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x44080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) (async) ioctl$HIDIOCGREPORTINFO(r6, 0xc00c4809, &(0x7f0000000280)={0x1, 0x3, 0x4}) (async) 18:54:44 executing program 3: syz_clone(0x4404015c, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c06000091d10ac72d89950d0f3e6f013bad026a67ed24a77b06d2a087c2c019f6f3e2ad6735b8d13dc8535b9efbbdb06231c2926234cda365adfbc44bc39dc7f90cc4fb6a0325fdb336ea2d6d2580ba6cfdfc7d19020ac0e4b836feb1c3032b27eda3dd95c45976381a77", @ANYRES16=0x0, @ANYBLOB="06012abd7000fedbdf250b00000008000500fd5e000008000600ff7f000014000280080005000700000008000500ff01000008000600060000000800050001000000"], 0x48}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4004) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) setsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000000), 0x4) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa4, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbef}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xa4}}, 0x20000004) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c06000091d10ac72d89950d0f3e6f013bad026a67ed24a77b06d2a087c2c019f6f3e2ad6735b8d13dc8535b9efbbdb06231c2926234cda365adfbc44bc39dc7f90cc4fb6a0325fdb336ea2d6d2580ba6cfdfc7d19020ac0e4b836feb1c3032b27eda3dd95c45976381a77", @ANYRES16=0x0, @ANYBLOB="06012abd7000fedbdf250b00000008000500fd5e000008000600ff7f000014000280080005000700000008000500ff01000008000600060000000800050001000000"], 0x48}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4004) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) (async) setsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000000), 0x4) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) (async) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa4, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbef}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xa4}}, 0x20000004) (async) 18:54:44 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000000)=0x4, 0x4) 18:54:44 executing program 4: syz_clone(0x44040256, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:44 executing program 5: sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4004004) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000005cee1a530000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, 0x1, 0x8, 0x201, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000800}, 0x4040880) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000fbdbdf25130000d0c584ab31736fd2b64d38cceb4e000c009900010001004d0000000600360001000000"], 0x28}, 0x1, 0x0, 0x0, 0x44000044}, 0x40004) 18:54:44 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r1}) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) syz_io_uring_setup(0x34b0, &(0x7f0000000040)={0x0, 0xeae1, 0x10, 0x2, 0x1a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000100)) syz_io_uring_complete(0x0) socketpair(0x11, 0x80000, 0x7, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4010043}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc361}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xedec}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x814}, 0x4) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r9, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x1, 0x59}, @void, @val={0xc, 0x99, {0x8, 0x62}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r5, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x60}}}}, [@NL80211_ATTR_PRIVACY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4000001) ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f0000000380)) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) syz_io_uring_complete(0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r1}) (async) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) (async) syz_io_uring_setup(0x34b0, &(0x7f0000000040)={0x0, 0xeae1, 0x10, 0x2, 0x1a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000100)) (async) syz_io_uring_complete(0x0) (async) socketpair(0x11, 0x80000, 0x7, &(0x7f0000000300)) (async) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4010043}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc361}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xedec}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x814}, 0x4) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r9, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x1, 0x59}, @void, @val={0xc, 0x99, {0x8, 0x62}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x40) (async) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r5, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x60}}}}, [@NL80211_ATTR_PRIVACY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4000001) (async) ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f0000000380)) (async) 18:54:44 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000000)=0x4, 0x4) 18:54:44 executing program 5: sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4004004) (async, rerun: 32) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000005cee1a530000640000000800010055000000"], 0x1c}}, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, 0x1, 0x8, 0x201, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000800}, 0x4040880) (rerun: 32) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000fbdbdf25130000d0c584ab31736fd2b64d38cceb4e000c009900010001004d0000000600360001000000"], 0x28}, 0x1, 0x0, 0x0, 0x44000044}, 0x40004) 18:54:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c06000091d10ac72d89950d0f3e6f013bad026a67ed24a77b06d2a087c2c019f6f3e2ad6735b8d13dc8535b9efbbdb06231c2926234cda365adfbc44bc39dc7f90cc4fb6a0325fdb336ea2d6d2580ba6cfdfc7d19020ac0e4b836feb1c3032b27eda3dd95c45976381a77", @ANYRES16=0x0, @ANYBLOB="06012abd7000fedbdf250b00000008000500fd5e000008000600ff7f000014000280080005000700000008000500ff01000008000600060000000800050001000000"], 0x48}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4004) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x20000080) (async) setsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000000), 0x4) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa4, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbef}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xa4}}, 0x20000004) 18:54:45 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000000)=0x4, 0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bind$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000000)=0x4, 0x4) (async) 18:54:45 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r1 = syz_io_uring_complete(0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r1}) (async) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) (async) syz_io_uring_setup(0x34b0, &(0x7f0000000040)={0x0, 0xeae1, 0x10, 0x2, 0x1a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000100)) (async) syz_io_uring_complete(0x0) (async) socketpair(0x11, 0x80000, 0x7, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4010043}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xc4, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc361}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xedec}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x814}, 0x4) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r9, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x1, 0x59}, @void, @val={0xc, 0x99, {0x8, 0x62}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x40) (async) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r5, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x60}}}}, [@NL80211_ATTR_PRIVACY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4000001) (async) ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f0000000380)) 18:54:45 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x0, 0x70bd26, 0x6, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 18:54:45 executing program 3: syz_clone(0x44040162, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:45 executing program 5: sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4004004) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000005cee1a530000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, 0x1, 0x8, 0x201, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000800}, 0x4040880) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000fbdbdf25130000d0c584ab31736fd2b64d38cceb4e000c009900010001004d0000000600360001000000"], 0x28}, 0x1, 0x0, 0x0, 0x44000044}, 0x40004) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4004004) (async) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000005cee1a530000640000000800010055000000"], 0x1c}}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, 0x1, 0x8, 0x201, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000800}, 0x4040880) (async) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000fbdbdf25130000d0c584ab31736fd2b64d38cceb4e000c009900010001004d0000000600360001000000"], 0x28}, 0x1, 0x0, 0x0, 0x44000044}, 0x40004) (async) 18:54:45 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) r1 = accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @default, 0x0, [@default, @default, @default, @bcast, @remote, @rose]}, &(0x7f00000000c0)=0x40, 0x80000) sendto$rose(r1, &(0x7f0000000100)="04380851963051dabed7e9f02193ddd2cc9024e5167aefc6bb3f6a7e2d02070bf550599c7c9cb65e18cbdcbe09cb79c83d4cef8699863ae0171f53cfde17665a32c586f60bee5e32e29e550adc047aee3838a0c1c0308715537e060d528c1e86b2600bf00b5114a080e2917b32119e34e7894117d54b11432181772956563072f9e369724e5a4ca416fd427cbfe719cc2b90856660868ce8209cfe51be317b10e2c3dd86c42eda9183e9e743926b859731dac11afca3e19c", 0xb8, 0x0, &(0x7f00000001c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x30, r2, 0x41000) 18:54:45 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x0, 0x70bd26, 0x6, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 18:54:45 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004081}, 0x840) setsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000000), 0x4) 18:54:45 executing program 4: syz_clone(0x44040262, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:45 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x9, 0x6, 0x0, 0x80, 0x6, 0x1}, 0x81) 18:54:45 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) r1 = accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @default, 0x0, [@default, @default, @default, @bcast, @remote, @rose]}, &(0x7f00000000c0)=0x40, 0x80000) sendto$rose(r1, &(0x7f0000000100)="04380851963051dabed7e9f02193ddd2cc9024e5167aefc6bb3f6a7e2d02070bf550599c7c9cb65e18cbdcbe09cb79c83d4cef8699863ae0171f53cfde17665a32c586f60bee5e32e29e550adc047aee3838a0c1c0308715537e060d528c1e86b2600bf00b5114a080e2917b32119e34e7894117d54b11432181772956563072f9e369724e5a4ca416fd427cbfe719cc2b90856660868ce8209cfe51be317b10e2c3dd86c42eda9183e9e743926b859731dac11afca3e19c", 0xb8, 0x0, &(0x7f00000001c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x30, r2, 0x41000) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) (async) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @default, 0x0, [@default, @default, @default, @bcast, @remote, @rose]}, &(0x7f00000000c0)=0x40, 0x80000) (async) sendto$rose(r1, &(0x7f0000000100)="04380851963051dabed7e9f02193ddd2cc9024e5167aefc6bb3f6a7e2d02070bf550599c7c9cb65e18cbdcbe09cb79c83d4cef8699863ae0171f53cfde17665a32c586f60bee5e32e29e550adc047aee3838a0c1c0308715537e060d528c1e86b2600bf00b5114a080e2917b32119e34e7894117d54b11432181772956563072f9e369724e5a4ca416fd427cbfe719cc2b90856660868ce8209cfe51be317b10e2c3dd86c42eda9183e9e743926b859731dac11afca3e19c", 0xb8, 0x0, &(0x7f00000001c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x1, @null}, 0x1c) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) (async) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x30, r2, 0x41000) (async) 18:54:45 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004081}, 0x840) setsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000000), 0x4) 18:54:45 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x9, 0x6, 0x0, 0x80, 0x6, 0x1}, 0x81) 18:54:45 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004081}, 0x840) setsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000000), 0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004081}, 0x840) (async) setsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000000), 0x4) (async) 18:54:45 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) r1 = accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @default, 0x0, [@default, @default, @default, @bcast, @remote, @rose]}, &(0x7f00000000c0)=0x40, 0x80000) sendto$rose(r1, &(0x7f0000000100)="04380851963051dabed7e9f02193ddd2cc9024e5167aefc6bb3f6a7e2d02070bf550599c7c9cb65e18cbdcbe09cb79c83d4cef8699863ae0171f53cfde17665a32c586f60bee5e32e29e550adc047aee3838a0c1c0308715537e060d528c1e86b2600bf00b5114a080e2917b32119e34e7894117d54b11432181772956563072f9e369724e5a4ca416fd427cbfe719cc2b90856660868ce8209cfe51be317b10e2c3dd86c42eda9183e9e743926b859731dac11afca3e19c", 0xb8, 0x0, &(0x7f00000001c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x30, r2, 0x41000) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) (async) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @default, 0x0, [@default, @default, @default, @bcast, @remote, @rose]}, &(0x7f00000000c0)=0x40, 0x80000) (async) sendto$rose(r1, &(0x7f0000000100)="04380851963051dabed7e9f02193ddd2cc9024e5167aefc6bb3f6a7e2d02070bf550599c7c9cb65e18cbdcbe09cb79c83d4cef8699863ae0171f53cfde17665a32c586f60bee5e32e29e550adc047aee3838a0c1c0308715537e060d528c1e86b2600bf00b5114a080e2917b32119e34e7894117d54b11432181772956563072f9e369724e5a4ca416fd427cbfe719cc2b90856660868ce8209cfe51be317b10e2c3dd86c42eda9183e9e743926b859731dac11afca3e19c", 0xb8, 0x0, &(0x7f00000001c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x1, @null}, 0x1c) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) (async) mmap$fb(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x30, r2, 0x41000) (async) 18:54:45 executing program 3: syz_clone(0x44040168, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:45 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x0, 0x70bd26, 0x6, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 18:54:45 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x9, 0x6, 0x0, 0x80, 0x6, 0x1}, 0x81) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x9, 0x6, 0x0, 0x80, 0x6, 0x1}, 0x81) (async) 18:54:45 executing program 0: sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4004000) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) 18:54:45 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x72, 0xfa00, {&(0x7f00000000c0), 0x0, {0xa, 0x4e21, 0x8001, @empty}, r0}}, 0x38) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r1, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={r2}) ioctl$SIOCRSGCAUSE(r1, 0x5411, &(0x7f0000000080)) 18:54:45 executing program 4: syz_clone(0x44040276, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:45 executing program 5: getrusage(0x0, &(0x7f0000000040)) socketpair(0x15, 0x1, 0x3, &(0x7f0000000000)) 18:54:45 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x206, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x74}, @val={0x8}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) 18:54:45 executing program 0: sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4004000) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4004000) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) (async) 18:54:45 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x72, 0xfa00, {&(0x7f00000000c0), 0x0, {0xa, 0x4e21, 0x8001, @empty}, r0}}, 0x38) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r1, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r2 = socket$pptp(0x18, 0x1, 0x2) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={r2}) ioctl$SIOCRSGCAUSE(r1, 0x5411, &(0x7f0000000080)) 18:54:45 executing program 5: getrusage(0x0, &(0x7f0000000040)) (async) socketpair(0x15, 0x1, 0x3, &(0x7f0000000000)) 18:54:45 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x206, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x74}, @val={0x8}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) 18:54:46 executing program 3: syz_clone(0x44040186, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:46 executing program 0: sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4004000) (async) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) 18:54:46 executing program 5: getrusage(0x0, &(0x7f0000000040)) (async) socketpair(0x15, 0x1, 0x3, &(0x7f0000000000)) 18:54:46 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x206, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x74}, @val={0x8}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) (async) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) 18:54:46 executing program 4: syz_clone(0x4404028b, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:46 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x72, 0xfa00, {&(0x7f00000000c0), 0x0, {0xa, 0x4e21, 0x8001, @empty}, r0}}, 0x38) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r1, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) (async) r2 = socket$pptp(0x18, 0x1, 0x2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={r2}) (async) ioctl$SIOCRSGCAUSE(r1, 0x5411, &(0x7f0000000080)) 18:54:46 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x5, &(0x7f0000000000), 0x4) 18:54:46 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000fddbdf25570000000c00990008000000670000000600950008000000060095efffffffff050095003f00000006009500004000000600950000fe0000"], 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x649fb0f363435e0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x2d882ccc2e5d50c3, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x3, [@default, @default, @null, @bcast, @default, @null, @bcast, @bcast]}) 18:54:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYRESHEX=r1, @ANYRES32=r2, @ANYBLOB="0c7d920da2191af13dcd160000000044"], 0x34}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="0000030019cb46201dfb343d71f8e4619afb39956c60dac4adff1cc977674cef332907ebbbe2c4ffe1cfd649930659d83c19f000bbe53a50", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fedbdf252800000008000300", @ANYRES32=r2, @ANYBLOB="0c009900d6e000005500000004005f00070034001752bd00"], 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x8080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r5}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x88, r1, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000040)={@host, 0xf13}) socketpair(0x1a, 0x80000, 0x1, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$key(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x2, 0x9, 0x4, 0x6, 0x27, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d6, 0x8, 0x3, 0x1f, 0x3, 0xc0000001}, @sadb_x_policy={0x8, 0x12, 0x7f, 0x4, 0x0, 0x6e6bbe, 0x4, {0x6, 0x0, 0x0, 0x81, 0x0, 0x1, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e23}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_x_sa2={0x2, 0x13, 0x9, 0x0, 0x0, 0x78bd26, 0x3500}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e21, 0xfffffffe, @local, 0x11}}, @sadb_x_sec_ctx={0x10, 0x18, 0x6, 0x1, 0x78, "5128315630086631c50d353cb9907f78475e0b4659e4ac152eb9a02737ccddd57a06340dab65a7966782d282ca34bd8cc75418a1be8552d2d68feb674a92d65de16af5cdeb2a4347727a30c6ae2c61155bd0405254133c14f18398f3f0890265bafe7ff18774621405813fd4ccecc9fba28b5c4c9c5b9033"}]}, 0x138}}, 0x24000000) 18:54:46 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x278, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x63, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @perr={0x84, 0x55, {0x6, 0x5, [@ext={{}, @device_a, 0x9, @device_a, 0x28}, @ext={{}, @device_b, 0x81f, @device_a, 0x30}, @not_ext={{}, @device_b, 0xffff7fff, "", 0x37}, @ext={{}, @broadcast, 0x2, @broadcast, 0x10}, @not_ext={{}, @device_b, 0x3, "", 0x1}]}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x2b, 0xfc, "6335289db043ec2437b95eaabdbc70f34f55458ec548de7a3d53906551efad00a8f2a2d02f8be1"}, @NL80211_ATTR_FILS_ERP_RRK={0x5d, 0xfc, "671b09ce90153388cc6c847d3fafd9beb3e2042d545d42be76b4434e39c2b153687aae499e9096a8457cfaf3a1b573d8b83f64abc8e230644300501fb0954ce797f7c86eb63cc02ef72336ef86f04e796861af81fedf6694bf"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_REALM={0x102, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_REALM={0x34, 0xfa, "70aa5b7a0967ca9a351e7ba909583cc84c5b7b59045ecb3d67d75672404959f45e8d3f1525a6b6cc70d008b90db8f9f0"}, @NL80211_ATTR_FILS_ERP_RRK={0x26, 0xfc, "e6379b75fa6dfcbb709ceb7035458488a2d3ffb0ce0dc2abd1d023a4d271af94ba28"}]]}, 0x278}, 0x1, 0x0, 0x0, 0x24008884}, 0x40800) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000000)={r3}) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r1, 0x5411, &(0x7f0000000080)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4) 18:54:46 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x5, &(0x7f0000000000), 0x4) setsockopt$rose(0xffffffffffffffff, 0x104, 0x5, &(0x7f0000000000), 0x4) (async) 18:54:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYRESHEX=r1, @ANYRES32=r2, @ANYBLOB="0c7d920da2191af13dcd160000000044"], 0x34}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="0000030019cb46201dfb343d71f8e4619afb39956c60dac4adff1cc977674cef332907ebbbe2c4ffe1cfd649930659d83c19f000bbe53a50", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fedbdf252800000008000300", @ANYRES32=r2, @ANYBLOB="0c009900d6e000005500000004005f00070034001752bd00"], 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x8080) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r5}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x88, r1, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) (async) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000040)={@host, 0xf13}) (async) socketpair(0x1a, 0x80000, 0x1, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$key(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x2, 0x9, 0x4, 0x6, 0x27, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d6, 0x8, 0x3, 0x1f, 0x3, 0xc0000001}, @sadb_x_policy={0x8, 0x12, 0x7f, 0x4, 0x0, 0x6e6bbe, 0x4, {0x6, 0x0, 0x0, 0x81, 0x0, 0x1, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e23}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_x_sa2={0x2, 0x13, 0x9, 0x0, 0x0, 0x78bd26, 0x3500}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e21, 0xfffffffe, @local, 0x11}}, @sadb_x_sec_ctx={0x10, 0x18, 0x6, 0x1, 0x78, "5128315630086631c50d353cb9907f78475e0b4659e4ac152eb9a02737ccddd57a06340dab65a7966782d282ca34bd8cc75418a1be8552d2d68feb674a92d65de16af5cdeb2a4347727a30c6ae2c61155bd0405254133c14f18398f3f0890265bafe7ff18774621405813fd4ccecc9fba28b5c4c9c5b9033"}]}, 0x138}}, 0x24000000) 18:54:46 executing program 3: syz_clone(0x44040190, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:46 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000fddbdf25570000000c00990008000000670000000600950008000000060095efffffffff050095003f00000006009500004000000600950000fe0000"], 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x649fb0f363435e0) (async) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x2d882ccc2e5d50c3, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x3, [@default, @default, @null, @bcast, @default, @null, @bcast, @bcast]}) 18:54:46 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x278, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x63, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @perr={0x84, 0x55, {0x6, 0x5, [@ext={{}, @device_a, 0x9, @device_a, 0x28}, @ext={{}, @device_b, 0x81f, @device_a, 0x30}, @not_ext={{}, @device_b, 0xffff7fff, "", 0x37}, @ext={{}, @broadcast, 0x2, @broadcast, 0x10}, @not_ext={{}, @device_b, 0x3, "", 0x1}]}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x2b, 0xfc, "6335289db043ec2437b95eaabdbc70f34f55458ec548de7a3d53906551efad00a8f2a2d02f8be1"}, @NL80211_ATTR_FILS_ERP_RRK={0x5d, 0xfc, "671b09ce90153388cc6c847d3fafd9beb3e2042d545d42be76b4434e39c2b153687aae499e9096a8457cfaf3a1b573d8b83f64abc8e230644300501fb0954ce797f7c86eb63cc02ef72336ef86f04e796861af81fedf6694bf"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_REALM={0x102, 0xfa, "f8ad69cc4c44c4ec6d10223db91cf5a831121028b1921c9fd6827d838fd60cd7f5ebc2aa604eb64a7197a47858c22298678ed0c1cd5cebb759685869caa28be964eaece6444d80295452cbe04ad0001916fde805e1f5064b410d1b4b2714a5a395708823983c4c2381401b8366687e119780c17cbcf2fb14e89f964156d835de8f155ff90ae8f036807dc19f5abfb521eaf7f6441aa94e2892a78166c47baf6fb93f0f30268ae44e48ff183c039f0e64b165fcf4846d6a74aacbb4ffbc681f5ea06cd1ed9f397e33cc37e83f9e2aaa2bdced78fe6051c64ebdfe733885d59549b8d316f8c52f6a2dd853bf8cea92fb7e092c5175b7aed3ccb7af11a5afa2"}, @NL80211_ATTR_FILS_ERP_REALM={0x34, 0xfa, "70aa5b7a0967ca9a351e7ba909583cc84c5b7b59045ecb3d67d75672404959f45e8d3f1525a6b6cc70d008b90db8f9f0"}, @NL80211_ATTR_FILS_ERP_RRK={0x26, 0xfc, "e6379b75fa6dfcbb709ceb7035458488a2d3ffb0ce0dc2abd1d023a4d271af94ba28"}]]}, 0x278}, 0x1, 0x0, 0x0, 0x24008884}, 0x40800) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r2 = socket$kcm(0x29, 0x2, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000000)={r3}) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) (async) ioctl$SIOCRSGCAUSE(r1, 0x5411, &(0x7f0000000080)) (async) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4) 18:54:46 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x5, &(0x7f0000000000), 0x4) 18:54:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYRESHEX=r1, @ANYRES32=r2, @ANYBLOB="0c7d920da2191af13dcd160000000044"], 0x34}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="0000030019cb46201dfb343d71f8e4619afb39956c60dac4adff1cc977674cef332907ebbbe2c4ffe1cfd649930659d83c19f000bbe53a50", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fedbdf252800000008000300", @ANYRES32=r2, @ANYBLOB="0c009900d6e000005500000004005f00070034001752bd00"], 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x8080) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r5}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x88, r1, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) (async) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000040)={@host, 0xf13}) (async) socketpair(0x1a, 0x80000, 0x1, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$key(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x2, 0x9, 0x4, 0x6, 0x27, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d6, 0x8, 0x3, 0x1f, 0x3, 0xc0000001}, @sadb_x_policy={0x8, 0x12, 0x7f, 0x4, 0x0, 0x6e6bbe, 0x4, {0x6, 0x0, 0x0, 0x81, 0x0, 0x1, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e23}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_x_sa2={0x2, 0x13, 0x9, 0x0, 0x0, 0x78bd26, 0x3500}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e21, 0xfffffffe, @local, 0x11}}, @sadb_x_sec_ctx={0x10, 0x18, 0x6, 0x1, 0x78, "5128315630086631c50d353cb9907f78475e0b4659e4ac152eb9a02737ccddd57a06340dab65a7966782d282ca34bd8cc75418a1be8552d2d68feb674a92d65de16af5cdeb2a4347727a30c6ae2c61155bd0405254133c14f18398f3f0890265bafe7ff18774621405813fd4ccecc9fba28b5c4c9c5b9033"}]}, 0x138}}, 0x24000000) 18:54:46 executing program 4: syz_clone(0x440402b6, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:46 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$rose(0xffffffffffffffff, 0x104, 0x5, &(0x7f0000000000), 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xd0, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xabac}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x24000094) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, 0x0, 0x7, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7c677de1}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x42b}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x254}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x20}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000000}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004810}, 0x4080) 18:54:46 executing program 5: socketpair(0x6, 0x1, 0x6, &(0x7f0000000000)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r1}) 18:54:46 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000fddbdf25570000000c00990008000000670000000600950008000000060095efffffffff050095003f00000006009500004000000600950000fe0000"], 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x649fb0f363435e0) (async) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x2d882ccc2e5d50c3, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x3, [@default, @default, @null, @bcast, @default, @null, @bcast, @bcast]}) 18:54:46 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x278, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x63, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @perr={0x84, 0x55, {0x6, 0x5, [@ext={{}, @device_a, 0x9, @device_a, 0x28}, @ext={{}, @device_b, 0x81f, @device_a, 0x30}, @not_ext={{}, @device_b, 0xffff7fff, "", 0x37}, @ext={{}, @broadcast, 0x2, @broadcast, 0x10}, @not_ext={{}, @device_b, 0x3, "", 0x1}]}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x2b, 0xfc, "6335289db043ec2437b95eaabdbc70f34f55458ec548de7a3d53906551efad00a8f2a2d02f8be1"}, @NL80211_ATTR_FILS_ERP_RRK={0x5d, 0xfc, "671b09ce90153388cc6c847d3fafd9beb3e2042d545d42be76b4434e39c2b153687aae499e9096a8457cfaf3a1b573d8b83f64abc8e230644300501fb0954ce797f7c86eb63cc02ef72336ef86f04e796861af81fedf6694bf"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_REALM={0x102, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_REALM={0x34, 0xfa, "70aa5b7a0967ca9a351e7ba909583cc84c5b7b59045ecb3d67d75672404959f45e8d3f1525a6b6cc70d008b90db8f9f0"}, @NL80211_ATTR_FILS_ERP_RRK={0x26, 0xfc, "e6379b75fa6dfcbb709ceb7035458488a2d3ffb0ce0dc2abd1d023a4d271af94ba28"}]]}, 0x278}, 0x1, 0x0, 0x0, 0x24008884}, 0x40800) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r2 = socket$kcm(0x29, 0x2, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000000)={r3}) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) (async) ioctl$SIOCRSGCAUSE(r1, 0x5411, &(0x7f0000000080)) (async) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4) 18:54:46 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7}, 0x8) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={0xffffffffffffffff}) (async) setsockopt$rose(0xffffffffffffffff, 0x104, 0x5, &(0x7f0000000000), 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xd0, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xabac}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x24000094) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, 0x0, 0x7, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7c677de1}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x42b}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x254}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x20}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000000}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004810}, 0x4080) 18:54:46 executing program 5: socketpair(0x6, 0x1, 0x6, &(0x7f0000000000)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r1}) socketpair(0x6, 0x1, 0x6, &(0x7f0000000000)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r1}) (async) 18:54:46 executing program 3: syz_clone(0x4404019a, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:46 executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000040)={@host, 0x80000001}) setsockopt$rose(0xffffffffffffffff, 0x104, 0x1, &(0x7f0000000000), 0x4) 18:54:46 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 18:54:46 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7}, 0x8) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$rose(0xffffffffffffffff, 0x104, 0x5, &(0x7f0000000000), 0x4) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xd0, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xabac}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x24000094) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, 0x0, 0x7, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7c677de1}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x42b}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x254}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x20}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000000}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004810}, 0x4080) 18:54:46 executing program 5: socketpair(0x6, 0x1, 0x6, &(0x7f0000000000)) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r1}) 18:54:46 executing program 4: syz_clone(0x440402c2, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:47 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 18:54:47 executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000040)={@host, 0x80000001}) setsockopt$rose(0xffffffffffffffff, 0x104, 0x1, &(0x7f0000000000), 0x4) socket$inet_sctp(0x2, 0x1, 0x84) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000040)={@host, 0x80000001}) (async) setsockopt$rose(0xffffffffffffffff, 0x104, 0x1, &(0x7f0000000000), 0x4) (async) 18:54:47 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) r6 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x178, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1f, 0x6a}}}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random="a7bd"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x46}]}, @NL80211_ATTR_IE={0x11b, 0x2a, [@perr={0x84, 0x115, {0x0, 0x11, [@ext={{}, @broadcast, 0x0, @device_a, 0x3e}, @not_ext={{}, @device_b, 0x1, "", 0x34}, @not_ext={{}, @broadcast, 0xcc8, "", 0x22}, @ext={{}, @broadcast, 0x6, @broadcast, 0x10}, @ext={{}, @broadcast, 0x9, @device_a, 0x40}, @not_ext={{}, @device_b, 0x9, "", 0x1c}, @not_ext={{}, @broadcast, 0x800, "", 0x3a}, @ext={{}, @device_a, 0x5, @device_a, 0x1d}, @ext={{}, @device_b, 0x4, @broadcast, 0x2e}, @not_ext={{}, @device_b, 0xfffffff8, "", 0x2b}, @not_ext={{}, @device_a, 0x8000, "", 0x1e}, @ext={{}, @device_a, 0x3, @device_b, 0x2b}, @ext={{}, @broadcast, 0x5f4, @device_a, 0x1f}, @not_ext={{}, @broadcast, 0x810e, "", 0xf}, @ext={{}, @device_a, 0x10001, @device_a, 0x18}, @ext={{}, @device_a, 0x8, @device_a, 0x17}, @not_ext={{}, @device_a, 0x1f6, "", 0x2e}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) setsockopt$rose(r3, 0x104, 0x4, &(0x7f0000000040)=0x3, 0x4) 18:54:47 executing program 5: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000000)=0x3) 18:54:47 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 18:54:47 executing program 0: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000040)={@host, 0x80000001}) setsockopt$rose(0xffffffffffffffff, 0x104, 0x1, &(0x7f0000000000), 0x4) socket$inet_sctp(0x2, 0x1, 0x84) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000040)={@host, 0x80000001}) (async) setsockopt$rose(0xffffffffffffffff, 0x104, 0x1, &(0x7f0000000000), 0x4) (async) 18:54:47 executing program 3: syz_clone(0x440401fd, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:47 executing program 5: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000000)=0x3) 18:54:47 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) (async) r6 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x178, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1f, 0x6a}}}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random="a7bd"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x46}]}, @NL80211_ATTR_IE={0x11b, 0x2a, [@perr={0x84, 0x115, {0x0, 0x11, [@ext={{}, @broadcast, 0x0, @device_a, 0x3e}, @not_ext={{}, @device_b, 0x1, "", 0x34}, @not_ext={{}, @broadcast, 0xcc8, "", 0x22}, @ext={{}, @broadcast, 0x6, @broadcast, 0x10}, @ext={{}, @broadcast, 0x9, @device_a, 0x40}, @not_ext={{}, @device_b, 0x9, "", 0x1c}, @not_ext={{}, @broadcast, 0x800, "", 0x3a}, @ext={{}, @device_a, 0x5, @device_a, 0x1d}, @ext={{}, @device_b, 0x4, @broadcast, 0x2e}, @not_ext={{}, @device_b, 0xfffffff8, "", 0x2b}, @not_ext={{}, @device_a, 0x8000, "", 0x1e}, @ext={{}, @device_a, 0x3, @device_b, 0x2b}, @ext={{}, @broadcast, 0x5f4, @device_a, 0x1f}, @not_ext={{}, @broadcast, 0x810e, "", 0xf}, @ext={{}, @device_a, 0x10001, @device_a, 0x18}, @ext={{}, @device_a, 0x8, @device_a, 0x17}, @not_ext={{}, @device_a, 0x1f6, "", 0x2e}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) setsockopt$rose(r3, 0x104, 0x4, &(0x7f0000000040)=0x3, 0x4) 18:54:47 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x130, r2, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x39}}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x16}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x33}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x62b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xca8}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4004040) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) 18:54:47 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair(0x2a, 0x1, 0x8000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xcc, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe4, 0x19}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x103}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]]}, 0xcc}, 0x1, 0x0, 0x0, 0x4080}, 0x8890) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000280)=0x2, 0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={0x1}) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)) r4 = accept4$rose(r1, &(0x7f00000004c0)=@short={0xb, @dev, @default, 0x1, @rose}, &(0x7f0000000500)=0x1c, 0x80000) ioctl$SIOCRSGL2CALL(r4, 0x89e5, &(0x7f0000000540)=@rose) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x44054) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:47 executing program 4: syz_clone(0x440402d6, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:47 executing program 5: ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000000)=0x3) 18:54:47 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) socketpair(0x2a, 0x1, 0x8000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xcc, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe4, 0x19}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x103}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]]}, 0xcc}, 0x1, 0x0, 0x0, 0x4080}, 0x8890) (async, rerun: 32) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000280)=0x2, 0x4) (async, rerun: 32) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={0x1}) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)) (async) r4 = accept4$rose(r1, &(0x7f00000004c0)=@short={0xb, @dev, @default, 0x1, @rose}, &(0x7f0000000500)=0x1c, 0x80000) ioctl$SIOCRSGL2CALL(r4, 0x89e5, &(0x7f0000000540)=@rose) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x44054) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:47 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x130, r2, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x39}}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x16}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x33}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x62b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xca8}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4004040) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x130, r2, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x39}}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x16}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x33}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x62b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xca8}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4004040) (async) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) (async) 18:54:47 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) r6 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x178, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1f, 0x6a}}}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random="a7bd"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x46}]}, @NL80211_ATTR_IE={0x11b, 0x2a, [@perr={0x84, 0x115, {0x0, 0x11, [@ext={{}, @broadcast, 0x0, @device_a, 0x3e}, @not_ext={{}, @device_b, 0x1, "", 0x34}, @not_ext={{}, @broadcast, 0xcc8, "", 0x22}, @ext={{}, @broadcast, 0x6, @broadcast, 0x10}, @ext={{}, @broadcast, 0x9, @device_a, 0x40}, @not_ext={{}, @device_b, 0x9, "", 0x1c}, @not_ext={{}, @broadcast, 0x800, "", 0x3a}, @ext={{}, @device_a, 0x5, @device_a, 0x1d}, @ext={{}, @device_b, 0x4, @broadcast, 0x2e}, @not_ext={{}, @device_b, 0xfffffff8, "", 0x2b}, @not_ext={{}, @device_a, 0x8000, "", 0x1e}, @ext={{}, @device_a, 0x3, @device_b, 0x2b}, @ext={{}, @broadcast, 0x5f4, @device_a, 0x1f}, @not_ext={{}, @broadcast, 0x810e, "", 0xf}, @ext={{}, @device_a, 0x10001, @device_a, 0x18}, @ext={{}, @device_a, 0x8, @device_a, 0x17}, @not_ext={{}, @device_a, 0x1f6, "", 0x2e}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) setsockopt$rose(r3, 0x104, 0x4, &(0x7f0000000040)=0x3, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) (async) syz_io_uring_complete(0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x178, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1f, 0x6a}}}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random="a7bd"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x46}]}, @NL80211_ATTR_IE={0x11b, 0x2a, [@perr={0x84, 0x115, {0x0, 0x11, [@ext={{}, @broadcast, 0x0, @device_a, 0x3e}, @not_ext={{}, @device_b, 0x1, "", 0x34}, @not_ext={{}, @broadcast, 0xcc8, "", 0x22}, @ext={{}, @broadcast, 0x6, @broadcast, 0x10}, @ext={{}, @broadcast, 0x9, @device_a, 0x40}, @not_ext={{}, @device_b, 0x9, "", 0x1c}, @not_ext={{}, @broadcast, 0x800, "", 0x3a}, @ext={{}, @device_a, 0x5, @device_a, 0x1d}, @ext={{}, @device_b, 0x4, @broadcast, 0x2e}, @not_ext={{}, @device_b, 0xfffffff8, "", 0x2b}, @not_ext={{}, @device_a, 0x8000, "", 0x1e}, @ext={{}, @device_a, 0x3, @device_b, 0x2b}, @ext={{}, @broadcast, 0x5f4, @device_a, 0x1f}, @not_ext={{}, @broadcast, 0x810e, "", 0xf}, @ext={{}, @device_a, 0x10001, @device_a, 0x18}, @ext={{}, @device_a, 0x8, @device_a, 0x17}, @not_ext={{}, @device_a, 0x1f6, "", 0x2e}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) (async) setsockopt$rose(r3, 0x104, 0x4, &(0x7f0000000040)=0x3, 0x4) (async) 18:54:47 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0x79}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x24, 0x34, @random="d685c71331cd9c63a0559e390b5f295d5af8d44da6b4b01a2c33d6d9cb06268f"}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) 18:54:47 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x130, r2, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x39}}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x16}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x33}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x62b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xca8}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4004040) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x130, r2, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa4}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x39}}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x16}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x33}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x62b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xca8}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x4004040) (async) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) (async) 18:54:48 executing program 3: syz_clone(0x4404023c, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:48 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0x79}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x24, 0x34, @random="d685c71331cd9c63a0559e390b5f295d5af8d44da6b4b01a2c33d6d9cb06268f"}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0x79}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x24, 0x34, @random="d685c71331cd9c63a0559e390b5f295d5af8d44da6b4b01a2c33d6d9cb06268f"}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) (async) 18:54:48 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair(0x2a, 0x1, 0x8000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xcc, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe4, 0x19}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x103}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]]}, 0xcc}, 0x1, 0x0, 0x0, 0x4080}, 0x8890) (async) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000280)=0x2, 0x4) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000440)={0x1}) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)) (async) r4 = accept4$rose(r1, &(0x7f00000004c0)=@short={0xb, @dev, @default, 0x1, @rose}, &(0x7f0000000500)=0x1c, 0x80000) ioctl$SIOCRSGL2CALL(r4, 0x89e5, &(0x7f0000000540)=@rose) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x44054) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:48 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) 18:54:48 executing program 0: syz_io_uring_setup(0xc7e, &(0x7f0000002a80)={0x0, 0x4a1a, 0x20, 0x1, 0x331}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002cc0)=0x0, &(0x7f0000002b40)) syz_io_uring_setup(0x797, &(0x7f0000002b80)={0x0, 0x51b1, 0x1, 0x0, 0x3df}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000002c80)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1}, 0x9d) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000040)=@ll={0x11, 0x6, 0x0, 0x1, 0xfd, 0x6, @link_local}, 0x80, &(0x7f0000001580)=[{&(0x7f00000000c0)="9d597cda72b0621fe34b71fe30c2cd77950bc238f49e20b1ff3117c766cd967f051aa8d37b77687ce15aaccf998481209025866af3edefb684aa1a56e1", 0x3d}, {&(0x7f0000000100)="4063c8f8", 0x4}, {&(0x7f0000000140)="fcf464859bc446fbc8eb21423484706d5f8b8bd6bd4e89a4faa28dc7391ca67a49d62ed0c94ee703670309d2b04b3a183400b3fd6e0c373b201045bf0d869b6da00eb3aaad022d940bcc8f16025e23f24e073525bbe5f2210de8d73874acdb6dbad697d296e00847ec5f017dbb03b2e0d87a37db83db4a8665259d3fbdaadf871db5e9e5127c24f6e0f140cd2b52ac15de18c44bbb1721f83f36ef5067d8278858d65db70e85621f59e8af52094c3136bfec49", 0xb3}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="02d56429127d2a2534da36abc9da0d6a42df7eacd9cd14a26e29f0e80ac79840e228d4900abafdf8907b6c57e1dcd61f62fa76e3cc3c5e33087ac5d84b1af926441d96de4c", 0x45}, {&(0x7f0000001280)="a650bbf48bdd1642a3632a4af7b261f60548e2a7ec9608d6883703c5323321a0f4a77d034349f0e46bf11a1316adc0d670ed0e4d324b97dc6b3bb1c5336cdc895ca9917476cedf6504763c9072ac2b82cb29d86048e31c7eada3eaa4032a7f026091d48a637f50b36d7cc7467e27ed92ef072061357d2c4411779f6c37eec24c102dea25dc6962ef2f2b0c2ab59f153cc210d7c217c85611c27f051c7fa8a9011571cf66e66e07be7ece0e463a8c65d6936eaf2911cb5c21ca5c0d29af7d19fd71bfd742e3313e7510ab4204", 0xcc}, {&(0x7f0000001380)="6cbcdad3ffc699da3b35be6506ac61ffa56fd91f336ca05df9478b04de9fc497a5578afab1048de811e76571ec43cefe920f381410ebadec556d133b3a78edd3cec8f2a0180ed5d7efa51338c9bdd42144ea3bbb395364c6a3a4414f37f5261e4083715db524fe4d540a4b7f7f9b2b11eec64a8651fed2c57ebaef27c3c1a1a1cb0de60c2a685d31d8a3d86cac50c86dcaa8d82634240ef13fb8819bbce153c8988b0be8e556d02728439fe20fc72f6e735f6811e7294359de002aef9f6b9ab014dbb8da99c2d942e35da732f285d901e07f128a23b410c9cfadd67f2654453d2a42dd3391808ba676e5", 0xea}, {&(0x7f0000001480)="ca048d441cd10ac7903a9fa6bfeb75aef5abe293d77956bdc3c17345daf37afbca3bac65e643d7efa3eba38066ca281ffe2407ca6627bce009f738e6d22f99c22fd779b751038da8a64ebe89e4e06aa6b9dfd6b40da833308a9df3ee2bd13c4eb8a31308a9fe9e6af31b3f1acf24c01197d1778f6eda24c600eca4a9cc79d159f1f31fafbcefc83f92fb1eaf4f802e4bbbf95e19688b23d16cf7f80a9c50ce74e1426e481cc8db97087fa0d53ccd22645eb1be73138a7f12cb2ce47a76bc46cdef03f3bd3f090f2b2e47b493", 0xcc}], 0x8, &(0x7f0000001600)=[{0x48, 0x10d, 0x4, "c020c51ab2f0230b47240cbe6d2d5168a13f46599a37a59eb15ccd0a5872d207d08e7673987b8351d4489ebc17679710d03e"}, {0x10, 0x118, 0x3f}, {0x108, 0x108, 0x80000000, "f3c0c19f332625b0a271e71d2f9bdf776f76bd06efb7f9fc65006ce7a8c7a7261c3c368da34f10b6b6b5e076d34f95ae0d25002d9e74037089e5f20a1923d3dc4873e5eb1661c81203996ed675f3a20fcfe27dfe6404ce5675d8342a6c739777e6698d0e91675ee5eb34d058701e89987639b6a1cccd7a0c0515c16d7119ba8b6d517d9c0f7f584d661dd78a4662b511363abce1e96de06e46e97497e03980f6a8afcec4d27692cf89bbc6f33bf40d44772e9dbe342a7c9bbfde98dc4d23ce75cc29e7bfb415f73fdab54176b1c5ad1231f2ca9896af997ae21ec546886d0c7b04a5318c96e1f81047f70e545dd7196cd3a9a4fdbe6738f9"}, {0x1010, 0x10e, 0x7fff, "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"}, {0xf0, 0x102, 0xfffffff9, "46f386ebf01ff615c2ce06662b3bfe97c364ec9954a3e7cf9519176bc2cf5ba6e24668d60d30a4365bec70b3cfeca137b5dd19e5c8504ec630e555af47ecea7283e8d72e7b658b901d0e7231c4a3910f7025351b801b945fb4e5d3fa85a9d867cb88071191dbb249c4552568292699187930df09f1c62986093053c1ca75d2ee816a3ad91798d8c0202520c7f09ee2891cb75187594cd55bd8de7caf67f93b4320e1e4a3db5fb0a27b894648a0a4fd586feef479cbcc0a86aa54e6f42d973f562af9327efa296a7386be0a2f59e9df6fbc713816f950edb462"}, {0x78, 0x1, 0x1, "651f624ed2a921cdf04bd25c0a1ffb29bef2ff05fb9fdea12923610033635691b98ddb0a153c4341db8c21426471a06003f0f78ced3d09163c8257afce86994694fa7182e976af7a682bba4c58a4b922b435bcdad779dc4fb45dabcda011c1fd0b70c70601a1e6"}, {0x108, 0x10b, 0x0, "1d169f3277130d3ff7b18523e03ff80e5dbf2245185340298b1ba232d15243079b1fcaa8df3183fab67da6cb1a77b62933fce55e8e240986acb833e5713108428935c28f9d8c0cb5c2aaf6abae132996c6e9803cd957f5291f85ea7cac105fe547c8422fdf8369b7ca66e2da362edc7549942b6dbffeb72fca1b302a9ad686467e4c1136041a40bc8b6c1133ef340ad437a7f6810572de1da7b12cf451501f5f15dac8056c6efcc902ae958fc6a558eda220c74643837729a46cbadc213bc442cb6c634408c1b6857e4b41edc16b6be9b14a73e9a2dd1e3fbe8e30c5106d3dc224254840279463fa2b0a605c63e1d43c175dfaab"}, {0x30, 0x104, 0x7fffffff, "b8f936fed1a3caf80683acd3aa14142b61017e79397bf6484987"}], 0x1410}, 0x40000) setsockopt$rose(r2, 0x104, 0x4, &(0x7f0000000000), 0x4) 18:54:48 executing program 4: syz_clone(0x440402ec, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:48 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) 18:54:48 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000000)) ioctl$SIOCRSACCEPT(r0, 0x89e3) 18:54:48 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0x79}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x24, 0x34, @random="d685c71331cd9c63a0559e390b5f295d5af8d44da6b4b01a2c33d6d9cb06268f"}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) 18:54:48 executing program 0: syz_io_uring_setup(0xc7e, &(0x7f0000002a80)={0x0, 0x4a1a, 0x20, 0x1, 0x331}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002cc0)=0x0, &(0x7f0000002b40)) (async) syz_io_uring_setup(0x797, &(0x7f0000002b80)={0x0, 0x51b1, 0x1, 0x0, 0x3df}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000002c80)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1}, 0x9d) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000040)=@ll={0x11, 0x6, 0x0, 0x1, 0xfd, 0x6, @link_local}, 0x80, &(0x7f0000001580)=[{&(0x7f00000000c0)="9d597cda72b0621fe34b71fe30c2cd77950bc238f49e20b1ff3117c766cd967f051aa8d37b77687ce15aaccf998481209025866af3edefb684aa1a56e1", 0x3d}, {&(0x7f0000000100)="4063c8f8", 0x4}, {&(0x7f0000000140)="fcf464859bc446fbc8eb21423484706d5f8b8bd6bd4e89a4faa28dc7391ca67a49d62ed0c94ee703670309d2b04b3a183400b3fd6e0c373b201045bf0d869b6da00eb3aaad022d940bcc8f16025e23f24e073525bbe5f2210de8d73874acdb6dbad697d296e00847ec5f017dbb03b2e0d87a37db83db4a8665259d3fbdaadf871db5e9e5127c24f6e0f140cd2b52ac15de18c44bbb1721f83f36ef5067d8278858d65db70e85621f59e8af52094c3136bfec49", 0xb3}, {&(0x7f0000000200)="f3d96183aa54173211a2260f53b7a0d7f1eef493a7069f7ce13c86446f464165494c65f1c03a1cd17a19c5d917d1eab2ebb534dfac454c8b069ce6b24833a24ea3b0008c16127c2d2ff0024457b998ccd30637882bded1bebd4a1b4ed691ff4f280039d8a986bf8c65ab4442bcf3cc862883f7819fcfdec4d137cbf5488358323d4973f924169d467711e43d8e211eae8a8ad36e041035bf7260642bf454971e448a7069e801b6bb93c2e1f0d7e541d738b21cd28efd34063bdf84e2c66f50612bbdc1cbe6df9d938d69350947cc08fa27f27392b298488abc9c311499f7f6db933ac91497cc56eba4c5a4d2419484e3b99d2090023e74cc699dcbfb9c76b26cdf685b861862978fe929309dc1284450e4806b44eeb7d8439d10d9dd1e4bbe7adead3e17c340e680a49be90d15707c817b3f1cc6354a7d4a84c7d0803e732ea189bd3f7b314e6c262ee310d41f222b2541e49ad0ff70d8ca42ce043617a4779a2611a3900405508120dc2e66bfd4c2c11da095449ae27a5dac16aa7559835a9a1da7881129734b562c4d1826a1181cdcb35dda98808f098a352d968e57e40207528fca3637fc82e9726f54c9b09018dd190c7692ac1d852728f24d6cc69434ca7b3354aa9ac71ada8184b6b3b38fbe376492c1cb9e972ad8acc169e806b5d83f354802b952bf1fe3f85cabe5be46fa236f9e07582a9a2b7addf3ccdaf8fc7a7705c685f8c876eb4f3a247463ce3356bab4cbc85c03d3664a70c1a4687845048ed74aa60884ab62b7cabac5c3c330c8e370be9e7fe4ef93929683b4ad59d1889d79ba760b169c22a5d2dc9e2d384cf890c1e3a6eece3a9a9e5dedcf5a844e0b1efea268452516a2ea6d68dd57eeb87b69891ba54a97a48132bda6209dad013a0b0e8291557fb7b3f57772efc2474336464f5187355776fe51f313ff61594467c08cb4e9f1aafcbc397a3871ed48efb0d60d8917f61408ba3f348dbd2b5bafdf41de53e520186caaead26d340a60931b5c4e72b5f47a798ceb124d7afe360bc1fc80d88ce6e13bdea1e990fef70a256363ca09b707c9877e91435c87a03956653eaee007ef5ae155be3dbee4a4c039d3b329229913f6fc7d262ebf063ad31e9482787697af3ba066f3b3a6cbeb34813f2c814adc58a0cc361e54fbcf5ebbba0c5b1d3ad2364c3bda38573b56f542deb4413a9a4a78498a698c429ed83ba3eab9d7f91c69be5066ca84c88d8b9183c89fef9f6ae757fcfd5a3ffa4746fca3ad325a16c833698b7d2426cda6b4360e2982b54b2a49c79ffc0238bc47f32d3575e5c0038eccb883c49c2c3504e71f848569a8a52785e96183c7fe077f6e8991c08ad7e8b11a1bfb6589da1b63f47dff1d71fce173987f0293ca57017de28e8eba2d3904d784df67c5cfb9392a731c1653e8755a5b700c75ebc613cf7f1f55dc0c2cb6f2953fee034c71f1019826383052347e4b2573b40ce0087eb18b2bab39f4044fe67ecc33db10d7feabe472b9c99155f9143a413547657812b51d8fd2a00dc1757584032f18bfaf2e7bffe08ea5b6dd7cfa2493fdd077b5b72b24154ff2bc55ba08c09213ef34daa3b0b701a66efaa56da2c2786c91b6b03b456cf604d78757763945726b025eb524fabf0a092d6c90a318b54718581e10bbaa82530d0897c7fc6fc1356064c2a2d5155b742b792d06a6a3a97c9bf31e62fa1a045e6c6d8fa4684b0e6caa00036d3466e5d75d410d2914f38efcb2bf7d9747813c01a17e39297f7f73c81737b58841c9f03f2ad2c4007d8a8b0cdb556517c2cc388ccd607d137529444c1b093125414b406d68458de33a400a8b54f6be8ba57fbec481e80f9312d230458c20b7cadaebe5958b3e545053c29b7247ac68fce94b25e3a8c58b8dd6d1a0202371250762a3b31599f704708b7e2c8bcdb69751f38b029f1ae40af48c5c0214edde2536f27510c8d589c6707edca1d488106c5a0962b7f1d4c4027c1de43a71b40df8a964e110582a8516b3d8c1169e1338397d0920c91ec6c339c8addeebeb9353325667f6007796ebbdd90196ba3a7febcd4ee573ed961815330500c30c68cd01bea22a87a596e1340d7f44d3336569a75a43687bace17b0a746740dc26f8872fe4a465ee35720fcb01ef75aac83b681439ee4588bd1e759fb785040c57438f9ff2924cc6b4571053ca26b99caf2dad9fd02f2dc0bac9fe28cf64ccec5a2586ba8099a709733cc39e590c75856ab0471fea0ecc58ce7424456c8e552a467ad90d7c213514bf42f9fbad00e73142ac950f3839d6e2c309f1a623ba6320be1a8e192888528cb13ad06c198940b1cfb621cde6a3e77da1bb01c98d1656fca8d5b099e76b05edd570bb651afb90572570b81a860b5e8170e2f837478c295cc545b7d3e868f8090158c47ca1b5c2d271e8bb0b09ea828b0c4f6a534077e1c228cd29b4c571ff9c74930412bba0a8c23b79f983b1f9e8977eaa6d688b84b98a469e68c85d7f3d2886b60fe79a1880f5243e50a63f9f4ee742427ba792fd5f36e0299f2ab60f03a0fde898a2a65e28ae88f236ad02ecac512520c59ff73371c709592db10d05961297170b0c51e3585ae80ce50452c81ae30a15bbfdc8d98be94e82e7fda72bd7bd98f846e946e918e03721d03e243fee6da08ca3770f222a2b7d5eb6c6347985174f2b4e7e895efa6dac13114da5ce0711503223df002b5b70f65bd6d898c18ecd132cf9561ae0d8f26ff0821895d1b62bd17d3546f3f0cc317748e2de21e9af129609dafda8d30a55e793fc4e25dbf3fba91b3cce712e12c5e75ec7e141fc609254e1d831c3bf538396b1de950eced4b68d4958068ed884e234ef87f12d15dbf9efa830841c6445d02859d7a145669f07464c7a48af48f66ce0b89283fca7964f5fd82e3880949319715f146c799b82f03616fecba7a721341656f3f4502d7452e80655d31f3b06a42c720188f4758143f413227f7491c07e52703ccaa8b7b650561ae1bcec3d835424b79621ebedb495db0d97fd6e4af57023c7c1c3d17106a2c5b1e06d9dc8bed9592afd86f662393fe14e541ee3564a559333cd92e64cd77a4d14d17cec75b1c6203e7bc1e6641a5c41377265e46f0b1e6d48fdff39cae6766eca79e347db220ede0d571a17f8cb721c87b0feb70bf4c96f76ad24d67868a53579885557b1dfe27b092cae84297a014d56ab664719bcfc59464ac60014bca92748ae72021f30aa52ec090dfd8c964bdce8e0771045c00b15e02dbf093d70a05f0ac81bfe721b67549cc39c6d7f33a29eca2b6eaf6256bce79a13d9de7938f7843a28b96c506a5cae0fd9a5ee38c4f2fd556fe157d9c64c43943a5e07329d07f903fabc97f487e4bda3167c6af79ff893d2c173b94c74637dc3e24d30ee8db27e74b03e5b96f87e625a74c3af7ec22bc38b51d8a10f8fc73287dc0b8c8c74d157ed5aa5013bb1336279371f5a0130e19008129a55775f0049083b22ecbe22b2548720b84efd50423f3d87213e273887031142890571079f6d94d38c939c101a9e6b06395cb279a0dc81c352f3dd89b8d858598881b321d63d52e1c57013f68e2d47acc6471f0c2becdb5fdf97b7408d275d8fa263ce50a8f335cb2bf7ac9f2d55b6e5884a1b9aa79e122e529bfd3819bb9cd9394a103702c61c7d0598cd11878477fbee2d03e6ed6dc53022a8b22fc540dc41b792f1329e4c350107bac931b39b2dda8c459da9eea61a367fc5a73ae454734caa058e60679d502712240046fed0c10a42084d65e5c391305be8b3dfc4c87c3f58e57ccb0ed4564fc4f024d1aa31195f7014a7b3bc3a3410d0800dd069e4796ccf37c1ba03a39e43e0d7115187fb71c5fed7d9cc83b7df2a2710a153fdbfec858e03446d730a0100589344cafe38e37edf51c44b60ca6a1bcaeecddcf169f289e990a7080dd3aa14a99fca58d7cdaad545fe337a4214b913c8298a7038c5a0ac9136533d7973e9db98aa7e2dae58a140d67d85dd2fb64b4fe224c21ebbb505b49d943fe50a1d4b3705ca03a36e9344f231ea29f2b30cf3ca022e13cf5fde2fde4208e9ff4034b78b3137655c560eef4f43d6c39b858b5643ff9351150d9c7ba5ead106a8bfcfd4d940bd35479aef1d8f4a1c20f5b50461ec959257a2e5c8fc30baa45f094d80d76b0ed421aa63fef136aca850d9791eadfb3dfdb517ce00a0fab649daf4f751749217031e15ca6dde3604c4bfa678a7b91badd77609e459bde57e4b4b3d4a47992d5a169d53d172702be025fbc2d0ce7ec4b0d7566f8d8a89bb1feee18b7ee8a675a757639e34dec4988b2541da6a860aca6faad0ace9e0df442bbd5d33c34a50dc00874b3cc5c0e658fb8e86967db6fb0b19c0e30530bf9b2a454784254ac38ad7e27f34ddbd27bb3f10500edfc18ce19e2ae354bc7bc7eccc74e40cff3006edb83a1625a1fca68bf625621515ec1b939723e977f383b39d91b212276c8fba56823aab327e6bc38104f0066cae47d1fd27743ef64f0337c856da5a5423bcd281668563a3df265dc3eb5dbd8b4d7613b0f914c004e6ea4040a8c99ddaee26af20b5b6062e69b2fcda2c4053f3c99b1288f457be3d02693eb9893b93242643c8cecc3fad1d75daa664ffedcbb13100dc77f5150ef5611c4eb1c8115df00a96261e43b5d5a801a1a7e9facfc7a29ec6b2f877f6b427cd82ad4b93d04de0457e09caeba180fc57a75aa5de1b048ae1eba37477eca1db49fcb245745c40fcfaa07eb7549e5e8ae13d143e7a7c0993e5efb5de54c6af5b2546afb0a5cfb8581bb26ca08a3df43b2b89269d31caa75f4e14e91ab6e2c5865e679d531c2c799f8e88d6f62c41a116264c24f3740f37f05622da0939a6fdcaee3371781f982feb77cc920802f178e164e24729f941034d082faf9c8495983203bd563b06f347bdcb812e9fe230791c5bf5da8f847e8c3960797df31f48071c3c052ea1c5fe47fcb2986febc8b28c06d7f286cd04a55b88da2ba4b5645e9750033ed7d61ea44cd5feb1d74886ca36b859600d855e7061376a2944225b416aec760142a2a043a9bc9aef3b440f7a15c9f13a61e450578ff458ec372478c2188ae1b1644024296741d42884d0cf8e89f5adbb6ddd26995702ccc91f43682bf5ce186cc7cf5e695e9511cd962b85ac2a4e8f040a483ccb1193c2a1bd360f350da0250c686ac8ef28db239864c51a3d2e024c1e4df54fabb30f1d4584e210ed24a747e6e74f39bc945c3b1aacb2ecb8dada8715efb0886fa60ead03ad3132e546345d2cce149ede4e037d0e1d67d79abb3a2fa9484c6168085ca9e715c5c3cba86ca00e926c4296a6f8c91ad0ff2ecb7b858700873291cc6bf5438395966006a8db090ebadda75efa7f45adac0b3ac70276766002c234db2f994b1262d15c47ce1da39aa1b54efc4b4f5d194af9d8626fd49f72dc6fe2f4367257ac772f9bceb818332ff4eb1fe37cb63721bb046326e08e658715642df0da9942b1a07ae6dd84eb11fb6d35ef838a6299f3e762f93dd3f66fbf55c19f250cfc5bc3c60e223ad3f7d13d4f9d1889ab5611cc6ca8d88f31654880b14785cd7909c6c70ddcb1bc1877fffe63c2528fa8adaf9cfdd8816e7706e55b2461cb434f7a4cf1f801799c14ff2037c6958041c7c2c11aa4376f262172be83c900df453e9c186629d3499d2019a1ccfc6579da0897e580de420765e2cfb8c502067b7a87fd1ba32409a52b956ab9f878a6cac1b8e3c1d68b9888d9e80dbe5138b41fabac02aef44930a0d3f90534cc9b08b67b99fb1b", 0x1000}, {&(0x7f0000001200)="02d56429127d2a2534da36abc9da0d6a42df7eacd9cd14a26e29f0e80ac79840e228d4900abafdf8907b6c57e1dcd61f62fa76e3cc3c5e33087ac5d84b1af926441d96de4c", 0x45}, {&(0x7f0000001280)="a650bbf48bdd1642a3632a4af7b261f60548e2a7ec9608d6883703c5323321a0f4a77d034349f0e46bf11a1316adc0d670ed0e4d324b97dc6b3bb1c5336cdc895ca9917476cedf6504763c9072ac2b82cb29d86048e31c7eada3eaa4032a7f026091d48a637f50b36d7cc7467e27ed92ef072061357d2c4411779f6c37eec24c102dea25dc6962ef2f2b0c2ab59f153cc210d7c217c85611c27f051c7fa8a9011571cf66e66e07be7ece0e463a8c65d6936eaf2911cb5c21ca5c0d29af7d19fd71bfd742e3313e7510ab4204", 0xcc}, {&(0x7f0000001380)="6cbcdad3ffc699da3b35be6506ac61ffa56fd91f336ca05df9478b04de9fc497a5578afab1048de811e76571ec43cefe920f381410ebadec556d133b3a78edd3cec8f2a0180ed5d7efa51338c9bdd42144ea3bbb395364c6a3a4414f37f5261e4083715db524fe4d540a4b7f7f9b2b11eec64a8651fed2c57ebaef27c3c1a1a1cb0de60c2a685d31d8a3d86cac50c86dcaa8d82634240ef13fb8819bbce153c8988b0be8e556d02728439fe20fc72f6e735f6811e7294359de002aef9f6b9ab014dbb8da99c2d942e35da732f285d901e07f128a23b410c9cfadd67f2654453d2a42dd3391808ba676e5", 0xea}, {&(0x7f0000001480)="ca048d441cd10ac7903a9fa6bfeb75aef5abe293d77956bdc3c17345daf37afbca3bac65e643d7efa3eba38066ca281ffe2407ca6627bce009f738e6d22f99c22fd779b751038da8a64ebe89e4e06aa6b9dfd6b40da833308a9df3ee2bd13c4eb8a31308a9fe9e6af31b3f1acf24c01197d1778f6eda24c600eca4a9cc79d159f1f31fafbcefc83f92fb1eaf4f802e4bbbf95e19688b23d16cf7f80a9c50ce74e1426e481cc8db97087fa0d53ccd22645eb1be73138a7f12cb2ce47a76bc46cdef03f3bd3f090f2b2e47b493", 0xcc}], 0x8, &(0x7f0000001600)=[{0x48, 0x10d, 0x4, "c020c51ab2f0230b47240cbe6d2d5168a13f46599a37a59eb15ccd0a5872d207d08e7673987b8351d4489ebc17679710d03e"}, {0x10, 0x118, 0x3f}, {0x108, 0x108, 0x80000000, "f3c0c19f332625b0a271e71d2f9bdf776f76bd06efb7f9fc65006ce7a8c7a7261c3c368da34f10b6b6b5e076d34f95ae0d25002d9e74037089e5f20a1923d3dc4873e5eb1661c81203996ed675f3a20fcfe27dfe6404ce5675d8342a6c739777e6698d0e91675ee5eb34d058701e89987639b6a1cccd7a0c0515c16d7119ba8b6d517d9c0f7f584d661dd78a4662b511363abce1e96de06e46e97497e03980f6a8afcec4d27692cf89bbc6f33bf40d44772e9dbe342a7c9bbfde98dc4d23ce75cc29e7bfb415f73fdab54176b1c5ad1231f2ca9896af997ae21ec546886d0c7b04a5318c96e1f81047f70e545dd7196cd3a9a4fdbe6738f9"}, {0x1010, 0x10e, 0x7fff, "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"}, {0xf0, 0x102, 0xfffffff9, "46f386ebf01ff615c2ce06662b3bfe97c364ec9954a3e7cf9519176bc2cf5ba6e24668d60d30a4365bec70b3cfeca137b5dd19e5c8504ec630e555af47ecea7283e8d72e7b658b901d0e7231c4a3910f7025351b801b945fb4e5d3fa85a9d867cb88071191dbb249c4552568292699187930df09f1c62986093053c1ca75d2ee816a3ad91798d8c0202520c7f09ee2891cb75187594cd55bd8de7caf67f93b4320e1e4a3db5fb0a27b894648a0a4fd586feef479cbcc0a86aa54e6f42d973f562af9327efa296a7386be0a2f59e9df6fbc713816f950edb462"}, {0x78, 0x1, 0x1, "651f624ed2a921cdf04bd25c0a1ffb29bef2ff05fb9fdea12923610033635691b98ddb0a153c4341db8c21426471a06003f0f78ced3d09163c8257afce86994694fa7182e976af7a682bba4c58a4b922b435bcdad779dc4fb45dabcda011c1fd0b70c70601a1e6"}, {0x108, 0x10b, 0x0, "1d169f3277130d3ff7b18523e03ff80e5dbf2245185340298b1ba232d15243079b1fcaa8df3183fab67da6cb1a77b62933fce55e8e240986acb833e5713108428935c28f9d8c0cb5c2aaf6abae132996c6e9803cd957f5291f85ea7cac105fe547c8422fdf8369b7ca66e2da362edc7549942b6dbffeb72fca1b302a9ad686467e4c1136041a40bc8b6c1133ef340ad437a7f6810572de1da7b12cf451501f5f15dac8056c6efcc902ae958fc6a558eda220c74643837729a46cbadc213bc442cb6c634408c1b6857e4b41edc16b6be9b14a73e9a2dd1e3fbe8e30c5106d3dc224254840279463fa2b0a605c63e1d43c175dfaab"}, {0x30, 0x104, 0x7fffffff, "b8f936fed1a3caf80683acd3aa14142b61017e79397bf6484987"}], 0x1410}, 0x40000) setsockopt$rose(r2, 0x104, 0x4, &(0x7f0000000000), 0x4) 18:54:48 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000000)) ioctl$SIOCRSACCEPT(r0, 0x89e3) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000000)) (async) ioctl$SIOCRSACCEPT(r0, 0x89e3) (async) 18:54:48 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) 18:54:48 executing program 0: syz_io_uring_setup(0xc7e, &(0x7f0000002a80)={0x0, 0x4a1a, 0x20, 0x1, 0x331}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002cc0)=0x0, &(0x7f0000002b40)) syz_io_uring_setup(0x797, &(0x7f0000002b80)={0x0, 0x51b1, 0x1, 0x0, 0x3df}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000002c80)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1}, 0x9d) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000040)=@ll={0x11, 0x6, 0x0, 0x1, 0xfd, 0x6, @link_local}, 0x80, &(0x7f0000001580)=[{&(0x7f00000000c0)="9d597cda72b0621fe34b71fe30c2cd77950bc238f49e20b1ff3117c766cd967f051aa8d37b77687ce15aaccf998481209025866af3edefb684aa1a56e1", 0x3d}, {&(0x7f0000000100)="4063c8f8", 0x4}, {&(0x7f0000000140)="fcf464859bc446fbc8eb21423484706d5f8b8bd6bd4e89a4faa28dc7391ca67a49d62ed0c94ee703670309d2b04b3a183400b3fd6e0c373b201045bf0d869b6da00eb3aaad022d940bcc8f16025e23f24e073525bbe5f2210de8d73874acdb6dbad697d296e00847ec5f017dbb03b2e0d87a37db83db4a8665259d3fbdaadf871db5e9e5127c24f6e0f140cd2b52ac15de18c44bbb1721f83f36ef5067d8278858d65db70e85621f59e8af52094c3136bfec49", 0xb3}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="02d56429127d2a2534da36abc9da0d6a42df7eacd9cd14a26e29f0e80ac79840e228d4900abafdf8907b6c57e1dcd61f62fa76e3cc3c5e33087ac5d84b1af926441d96de4c", 0x45}, {&(0x7f0000001280)="a650bbf48bdd1642a3632a4af7b261f60548e2a7ec9608d6883703c5323321a0f4a77d034349f0e46bf11a1316adc0d670ed0e4d324b97dc6b3bb1c5336cdc895ca9917476cedf6504763c9072ac2b82cb29d86048e31c7eada3eaa4032a7f026091d48a637f50b36d7cc7467e27ed92ef072061357d2c4411779f6c37eec24c102dea25dc6962ef2f2b0c2ab59f153cc210d7c217c85611c27f051c7fa8a9011571cf66e66e07be7ece0e463a8c65d6936eaf2911cb5c21ca5c0d29af7d19fd71bfd742e3313e7510ab4204", 0xcc}, {&(0x7f0000001380)="6cbcdad3ffc699da3b35be6506ac61ffa56fd91f336ca05df9478b04de9fc497a5578afab1048de811e76571ec43cefe920f381410ebadec556d133b3a78edd3cec8f2a0180ed5d7efa51338c9bdd42144ea3bbb395364c6a3a4414f37f5261e4083715db524fe4d540a4b7f7f9b2b11eec64a8651fed2c57ebaef27c3c1a1a1cb0de60c2a685d31d8a3d86cac50c86dcaa8d82634240ef13fb8819bbce153c8988b0be8e556d02728439fe20fc72f6e735f6811e7294359de002aef9f6b9ab014dbb8da99c2d942e35da732f285d901e07f128a23b410c9cfadd67f2654453d2a42dd3391808ba676e5", 0xea}, {&(0x7f0000001480)="ca048d441cd10ac7903a9fa6bfeb75aef5abe293d77956bdc3c17345daf37afbca3bac65e643d7efa3eba38066ca281ffe2407ca6627bce009f738e6d22f99c22fd779b751038da8a64ebe89e4e06aa6b9dfd6b40da833308a9df3ee2bd13c4eb8a31308a9fe9e6af31b3f1acf24c01197d1778f6eda24c600eca4a9cc79d159f1f31fafbcefc83f92fb1eaf4f802e4bbbf95e19688b23d16cf7f80a9c50ce74e1426e481cc8db97087fa0d53ccd22645eb1be73138a7f12cb2ce47a76bc46cdef03f3bd3f090f2b2e47b493", 0xcc}], 0x8, &(0x7f0000001600)=[{0x48, 0x10d, 0x4, "c020c51ab2f0230b47240cbe6d2d5168a13f46599a37a59eb15ccd0a5872d207d08e7673987b8351d4489ebc17679710d03e"}, {0x10, 0x118, 0x3f}, {0x108, 0x108, 0x80000000, "f3c0c19f332625b0a271e71d2f9bdf776f76bd06efb7f9fc65006ce7a8c7a7261c3c368da34f10b6b6b5e076d34f95ae0d25002d9e74037089e5f20a1923d3dc4873e5eb1661c81203996ed675f3a20fcfe27dfe6404ce5675d8342a6c739777e6698d0e91675ee5eb34d058701e89987639b6a1cccd7a0c0515c16d7119ba8b6d517d9c0f7f584d661dd78a4662b511363abce1e96de06e46e97497e03980f6a8afcec4d27692cf89bbc6f33bf40d44772e9dbe342a7c9bbfde98dc4d23ce75cc29e7bfb415f73fdab54176b1c5ad1231f2ca9896af997ae21ec546886d0c7b04a5318c96e1f81047f70e545dd7196cd3a9a4fdbe6738f9"}, {0x1010, 0x10e, 0x7fff, "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"}, {0xf0, 0x102, 0xfffffff9, "46f386ebf01ff615c2ce06662b3bfe97c364ec9954a3e7cf9519176bc2cf5ba6e24668d60d30a4365bec70b3cfeca137b5dd19e5c8504ec630e555af47ecea7283e8d72e7b658b901d0e7231c4a3910f7025351b801b945fb4e5d3fa85a9d867cb88071191dbb249c4552568292699187930df09f1c62986093053c1ca75d2ee816a3ad91798d8c0202520c7f09ee2891cb75187594cd55bd8de7caf67f93b4320e1e4a3db5fb0a27b894648a0a4fd586feef479cbcc0a86aa54e6f42d973f562af9327efa296a7386be0a2f59e9df6fbc713816f950edb462"}, {0x78, 0x1, 0x1, "651f624ed2a921cdf04bd25c0a1ffb29bef2ff05fb9fdea12923610033635691b98ddb0a153c4341db8c21426471a06003f0f78ced3d09163c8257afce86994694fa7182e976af7a682bba4c58a4b922b435bcdad779dc4fb45dabcda011c1fd0b70c70601a1e6"}, {0x108, 0x10b, 0x0, "1d169f3277130d3ff7b18523e03ff80e5dbf2245185340298b1ba232d15243079b1fcaa8df3183fab67da6cb1a77b62933fce55e8e240986acb833e5713108428935c28f9d8c0cb5c2aaf6abae132996c6e9803cd957f5291f85ea7cac105fe547c8422fdf8369b7ca66e2da362edc7549942b6dbffeb72fca1b302a9ad686467e4c1136041a40bc8b6c1133ef340ad437a7f6810572de1da7b12cf451501f5f15dac8056c6efcc902ae958fc6a558eda220c74643837729a46cbadc213bc442cb6c634408c1b6857e4b41edc16b6be9b14a73e9a2dd1e3fbe8e30c5106d3dc224254840279463fa2b0a605c63e1d43c175dfaab"}, {0x30, 0x104, 0x7fffffff, "b8f936fed1a3caf80683acd3aa14142b61017e79397bf6484987"}], 0x1410}, 0x40000) setsockopt$rose(r2, 0x104, 0x4, &(0x7f0000000000), 0x4) syz_io_uring_setup(0xc7e, &(0x7f0000002a80)={0x0, 0x4a1a, 0x20, 0x1, 0x331}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002cc0), &(0x7f0000002b40)) (async) syz_io_uring_setup(0x797, &(0x7f0000002b80)={0x0, 0x51b1, 0x1, 0x0, 0x3df}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000002c00), &(0x7f0000002c40)) (async) syz_io_uring_submit(r0, r1, &(0x7f0000002c80)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1}, 0x9d) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000040)=@ll={0x11, 0x6, 0x0, 0x1, 0xfd, 0x6, @link_local}, 0x80, &(0x7f0000001580)=[{&(0x7f00000000c0)="9d597cda72b0621fe34b71fe30c2cd77950bc238f49e20b1ff3117c766cd967f051aa8d37b77687ce15aaccf998481209025866af3edefb684aa1a56e1", 0x3d}, {&(0x7f0000000100)="4063c8f8", 0x4}, {&(0x7f0000000140)="fcf464859bc446fbc8eb21423484706d5f8b8bd6bd4e89a4faa28dc7391ca67a49d62ed0c94ee703670309d2b04b3a183400b3fd6e0c373b201045bf0d869b6da00eb3aaad022d940bcc8f16025e23f24e073525bbe5f2210de8d73874acdb6dbad697d296e00847ec5f017dbb03b2e0d87a37db83db4a8665259d3fbdaadf871db5e9e5127c24f6e0f140cd2b52ac15de18c44bbb1721f83f36ef5067d8278858d65db70e85621f59e8af52094c3136bfec49", 0xb3}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="02d56429127d2a2534da36abc9da0d6a42df7eacd9cd14a26e29f0e80ac79840e228d4900abafdf8907b6c57e1dcd61f62fa76e3cc3c5e33087ac5d84b1af926441d96de4c", 0x45}, {&(0x7f0000001280)="a650bbf48bdd1642a3632a4af7b261f60548e2a7ec9608d6883703c5323321a0f4a77d034349f0e46bf11a1316adc0d670ed0e4d324b97dc6b3bb1c5336cdc895ca9917476cedf6504763c9072ac2b82cb29d86048e31c7eada3eaa4032a7f026091d48a637f50b36d7cc7467e27ed92ef072061357d2c4411779f6c37eec24c102dea25dc6962ef2f2b0c2ab59f153cc210d7c217c85611c27f051c7fa8a9011571cf66e66e07be7ece0e463a8c65d6936eaf2911cb5c21ca5c0d29af7d19fd71bfd742e3313e7510ab4204", 0xcc}, {&(0x7f0000001380)="6cbcdad3ffc699da3b35be6506ac61ffa56fd91f336ca05df9478b04de9fc497a5578afab1048de811e76571ec43cefe920f381410ebadec556d133b3a78edd3cec8f2a0180ed5d7efa51338c9bdd42144ea3bbb395364c6a3a4414f37f5261e4083715db524fe4d540a4b7f7f9b2b11eec64a8651fed2c57ebaef27c3c1a1a1cb0de60c2a685d31d8a3d86cac50c86dcaa8d82634240ef13fb8819bbce153c8988b0be8e556d02728439fe20fc72f6e735f6811e7294359de002aef9f6b9ab014dbb8da99c2d942e35da732f285d901e07f128a23b410c9cfadd67f2654453d2a42dd3391808ba676e5", 0xea}, {&(0x7f0000001480)="ca048d441cd10ac7903a9fa6bfeb75aef5abe293d77956bdc3c17345daf37afbca3bac65e643d7efa3eba38066ca281ffe2407ca6627bce009f738e6d22f99c22fd779b751038da8a64ebe89e4e06aa6b9dfd6b40da833308a9df3ee2bd13c4eb8a31308a9fe9e6af31b3f1acf24c01197d1778f6eda24c600eca4a9cc79d159f1f31fafbcefc83f92fb1eaf4f802e4bbbf95e19688b23d16cf7f80a9c50ce74e1426e481cc8db97087fa0d53ccd22645eb1be73138a7f12cb2ce47a76bc46cdef03f3bd3f090f2b2e47b493", 0xcc}], 0x8, &(0x7f0000001600)=[{0x48, 0x10d, 0x4, "c020c51ab2f0230b47240cbe6d2d5168a13f46599a37a59eb15ccd0a5872d207d08e7673987b8351d4489ebc17679710d03e"}, {0x10, 0x118, 0x3f}, {0x108, 0x108, 0x80000000, "f3c0c19f332625b0a271e71d2f9bdf776f76bd06efb7f9fc65006ce7a8c7a7261c3c368da34f10b6b6b5e076d34f95ae0d25002d9e74037089e5f20a1923d3dc4873e5eb1661c81203996ed675f3a20fcfe27dfe6404ce5675d8342a6c739777e6698d0e91675ee5eb34d058701e89987639b6a1cccd7a0c0515c16d7119ba8b6d517d9c0f7f584d661dd78a4662b511363abce1e96de06e46e97497e03980f6a8afcec4d27692cf89bbc6f33bf40d44772e9dbe342a7c9bbfde98dc4d23ce75cc29e7bfb415f73fdab54176b1c5ad1231f2ca9896af997ae21ec546886d0c7b04a5318c96e1f81047f70e545dd7196cd3a9a4fdbe6738f9"}, {0x1010, 0x10e, 0x7fff, "5c849e9b7fdb0efec3474dccd3ac9b5b610d69080e4aa4d9a2099cc0f68100e1baff80c9aa3c7f933bee05d269fa6fc80d2ef6879b56f6ad40d7dcdacbdf30c8bed814a92f745aa0ffc50666b4c1caa2aed8d40eedf61469a0b0a007f612ba6ca14fa74ebd3f015429917a61de0d266e17889f45b81bcd9287489840ea7ac75e471a8b04f1e67f672750f06e991685ad26ac724678385a2542e975bdba35d827d505adfa3d6aa9862eb1b0106483d395c5bf1b3b9c038d1fe42f13bc0066f7dd512f482ceb3f0ce4984782e7de574db92bac0e01db2b83b558f433f52fface62a016506fb7af412aa53a2b7f8e8f244358c2c57387033edc4360cbd7acddb9cf2c051ccb13df65cd7935f4418d639ba1561da463b532cc32090a6b598a40daecc4034cb062a882497854656acb4ef4d3e88b8df63c42b703e40f36a38e806207d9de6d0a7a473db5a1f86d59260912710c7b56c5c88ecc073db7bdf9267661fdc9d3897780d41343047f27107db418aa239a4c0d4e2a26a91bd1b7979e159bcabe283e56fa9991a1e21df7a566eaa765d34b8b15e9e3f0998afa2d38e27f019c0eefbe76e0e70ecf19e5f944a038333c2ba35c22d3729415f9c6299679f29165fc23a406706c5bfd3e6ec88af6b608c4aacc3b4e41acad7efe52d2f0395bf35c3983fa751fb3b6ca170d056a2fecdcb8cf808496582c4721632630d42e5d53f7baea924f2e4df77ad051a542054a9bedf9a8a1dba9acbcb3f147abc06a742350b74e5d7e18f7a87ef7b71d9d4c55d8719c5e7e2ecf28ef0ab684cf6a0ffcdb8bb4e19bd5ee4b9715dafe7b0a4d327d206f11d7efbd5004eba30424633f842d6ff5aa16d6a1d68d904e8a8491a6c1d1c30a32dc97c124aeb64da13f1e917e95d2a9a364f64acebd629821a321910edda8f9b4b0daadf047d278bef7c38496b3663de7f5ba8a4484f05f9060e1faac21af75e3feac6df450af7fbaecf0575ba4d48cd2f21a61d4c6bda7742807a3a061a8ed9c695d223effe346d6aeb204bd1550df36d02d35c013d4cfeec16c06bf081a08acca73ad79d9f9b38dcbc09f0813b1bd7d7bc20001b376d31336955702f318b6d5262e52bb6ddca9e40ea5a9fd27ed1c42d48d1bb69055fa742f8918b72e4efdc55039aa9cac00722bac4c981ab77987eccd36de10529544e2045efa3440334d7a5422d82c27db75a6d528e70602aa268bddeacf231d7d209845b1c7db26848d990ecc086d09969ab9e40fd280ae95c757e33e40446d260ab30b0b6c86517e5d379aa03802d1a171cec531a1f315b68666be2a21eaa6e8cae6181ecc9708bfe194acbd49564bc1a81d8a86575caaeb83fe5a7e818137542fa7ca6aa47005c76fd8e04044887ee28e5f0bc61d3f6a1fd12cf363f6b3dfe1003d7c159dac22e89b6a4bb910265a9ecefc27a3eb085b1709c723aa5abc49f3deadd26cf8d2453e551a9f4e359517ad3cfca9b088e867ef3c5bdb969badb9ab4a716e045cb1c1d1b958901539c8358ea7cd6568e50b1468d2f73a6fec6066c40e7795dc3874d286f90c8326622632b6bb74b733bc4d2cfa1de0c9836fd0a6f82c1be8da7283f3fc52c86787968cd70fc4cb58b026ea2cddd3eb1827c3b0eb004db8573164aaf14af44586b2672f4e24aada1d1b0748110660f90c88eccf17ac9fedd912641f1485c85e567c7a25d54aecee4a57a3f907fd6af86a4d94d6e7994c2dae3047291fb51d5f951ca32f3785f56fc55ce93a43af6bd3cf2a0e02ea160431809cd4fbe763d48107a0543d8658a0f80000ab501260d09024d5fd9416b92f2fde22500db7d1fa0773909eaa6bc9aecb9d2ac89ca7d11148340122fc53bf2164044d50e991558ca5b8fed59a90ff82f92373c27201a0088985c6d64d9d047d693a6b27ee261c149c6be8e9c65a1a52da3834e44c26900475ce8327169c05c9f10a0e35af66e2cf430f1b3fdcac4fdc3ac091d79970103e2755823e27e1d284f3557068543929a32324c3c370b05e2bfa04ef4c1b247837c17b65c3bac49206af39174f477b5f80b51be5b513ab8c527515c01966c93a11a54926a098a3f6e231a01133c97e949679c472bb9d6c8153313c80b1f5bfe60d019ed66110554238017a32e23bb8a1e60574072ce0a35ce5c9632290eab16eca92ac288afa26503fb916cc97b30ff4f57c4e6d2c4956bfd6b9b5357efbf83bcf5586f411d6ff9a707836419ace6417aaf188788aa1dfe21f2d2a228cbb0963827f09aeb2b47c913dfe0ec01fe55b9d0a534396ec30eb6c01a40d257483052fe43747c5a432b938c724463007298a7caaa3c304193fc3d80273a292f79d9fa33eabdaaac9f988f7c04a3f1d42996b2969cf3c8f4b73b6899fe95c3b7c7cbd0b21de9311232a35bfd5c0d63d631fa21e85bae7de8bf5708007bde2f5657b41993f49398bb55b0bd7a73b4f87440d621b03782de0b278a868c23be2c6fb5fa7517fafa08823a79eba39aa62a12ba240b32c93b30505af34001c551c817af441199af38e60d7438d4349bfdcc741a46f7acd210f264e6044123f8910b9c69eb17aec60cae34413e2a2ec84eafd5f9eb0169a65722924495bf50936d51f7cde7dcfea7a1c977a75b8e3149fcaff1d741edde5891f5eec380d1d893effba1132462b2e2e29402a03ea1a9bdfc65d332b54003758c8e5700ffb6703654e0fccaefb9cc4dea5e5016cffe53c07c1f27c89f32b48f6a9af455af90bf0e4be0190443974b3ef9513dce87833f2d9558429a398d1a88cc67cd77d4487990ef5bb8a8aafa693543e0ff427fb397112cc17a5cb5e11dd4f65786762aae81268cc2721b41da14358fb6b07944a2c5b17ac4a1b34894a74a47264f8d405c9b53e9aafbd4f1b7774a8f877bfca423baf556d6bc9f653c1ceb6d8437482d0e0b85f80f62e0adf80201647b0bff1562744df9b4483443348f3b1d38681b19536d428059bf31e84bd17393bd339798c93f68369b85a347f64d45f8248781ed19ead77c15ae9cee3e87091b2aa5912894cd6a00b976e21263ba87c9c568a80c2c1d4511545582b662456bd4cd9bc6fa96ce039a7e9dd31c5a68d4d572f87e04e1e1267294ead85ec75aa52a55b64c2eb370affa5dee6ebe143c8f6858144c85579d7ffffc9082fd27d09ef526bae91b60cabe03efce414065a4a5658574eb8fffead13a4c4b5446e9cbcb7f92e71f05a6b3351860fc18dde87707fe846debd1ee916b85329c6d840aa2807b5968f2d93db8a8b7cfece5f6da0325c86846d304b4af9914bd3e70b8f920b07418e9e805a781b08e7c4039026e2f94df7fa286759186226a697a32a95b3f79439f62d1f6bcfe137ca303e33d1b151cb3f41836e79a8e91205e4ac9c4e1a5763c05a8c06621b5d8a3e03ff5849b00a7fb8010a9e25c8d6e75ad2361f9b139b7360e0696c23ae45be4f74e30942018ac9e670231764b3a2b55923c75b00b020a9e4d2a43fc462bddd6646c3cc62d1ffcab1919471df757509bab6102c171072f136b0852ee3f1589e5d32f55d300ad5d1d5c27aaaf9b972faef0babdfb1ca39f03c5ac34d9d3c056e06214da870b79366673f886bfb4b4ff1521753fa0191760693c42f56f110c36b3c7ccc5faae837ef848d14d3b52de9804606887e0600f4706b7bab6969bc5cc5a9f09f451c6ce17080a9f149686ce1e73008782132693bf4b9fe8f7294b5300e70c1cb2c740a576af932ca32e9210d7be6877f59ab46594a43ff0cc5a928fe577ecedaff5e1cd030a635dd5ce61b7add806d0dded969c7513077f260c56aa8712bdd1769678fc46efae192ffa3f7d74b59429367c65a3bc69d20eaafab5b360c6db45847c0d510a2f25df176dd72da7f374f15a6b5d263b2740aa41dbdb51581a028d73768c08d0f48c13147efb8426ee3b65e5c8187c722ab91312416daf319e3cd3c71863e179120c33a126cb0a32ebdb4a63a1e1b0a38c2cb0173a2054af4cf3903353ec987fc88d78d84d0c810c23544ac9fdcb3d88a5a331fcae0610d277c2b1b8fd951564dc8ba33ab6717d001895e350ee2d924db9ef2994bb59bbe67f6f19657a8a2e9233b97bcad5caa6e8338379a0cd79d120d0088605e0e73ac8a7ab4e7edfadda3e0ceb02f5710a2ba4a2a66d96a92692411be45b537d5022461a183fd34c0d3b6be4c58df4c7827904e08ce07ad1d5f23fe642700fdce842ea17c9775651917257a07208e6358946e3bf01a50a6611738d1fc7e6354913afc198336a85e57bf521bb37ea8c9e5949c6f53d748724b0334edf0b12d54f5357691e2c6bfa05e0b50ad92cfa896d7b8904d3cab293c21a6e8fc64c502ff75298d09748081080c1ee5bbca563de1e9180f04abe0661a45b0bbbeac0d06717529676df52aa1dda9b185ad4cd5dd1884525bfd33280bcc59124192a78c08d1e76c86d722d707a5c575408b1b275d9596058c117e4aec97e81fa97ce76aeeadbd1f16aa00049644f50f8d969a145c158bf7f4f3910233eeedef4e0f5b7a1999146c68633bc9abf6d674d9a4baaf8f1ea4b6e9556a1aa52f9efbc76fbddbcb7402a8360110d4fb7cb774c91c302f5ae91fdc001528fbf120ab7261697914e6388c57eced09cb19afc23148df06d9db4a700c177c86911581c71e118293a6de6e338e05c74c6a40b0010f722ecf82b0d14ccc81d0d3752e86fb99d2eece7d7e54f20ec4fe0195f2e9123249db5a563be0714fa9c558892736da6fd059c56e73fb96fe99b02d8217cedbd3c0037fdd54f529b8974b235386236470d3313f7ef9f3f2776b3fcb6f99910b71a46256e29e74828b9a438cc81125c1d0ad02571c9aff9be1fa5c4a82802a61701b315475efbe76cee24befaca373f8cd99e8c9b9df3c76991f711fad920c3f443d16ca8f2580b0e56df2c170d78ecffa50789654fb44b9621ee04600714dd2871e02077a88271f712b6e38aae0d21aca82caa5918e685dcc667aca0fe9ecfe4f523019a96cf6db46a11653e335ab18e7430624bc11b04c946db90083c5d6547edd5ddb72f35796c4dc0e9654175d0f250dd756cf807f557b6efd6849da479d2113da0e5ce0d6e96049b518523b53014a034559bdaacd1a6d682cfc01e87ef62d8a83d86e38598f336ded8775f563d20fc0b1b5ad324a2b9f4a7a12e3f4e42fb51e6600e815d1ac83c4a8eaf5acbb38f46e082758e2139e10940fc40dd11d44a68b785895fe8317aae6a53cb19cc5db1c2ec83f5ae664e8de3cd77691894c247e7be6bda7d2638fd29752992a7aec1f81d7e5a2d3610ded36bc90c9c8169d030f866b9ff3e9914946739d2b33985a6d7c04066df6284647361b2b73cfeed6e2a8611cde01a61a6051bff87dfdfdd6dc4c5eaeaa3342806343a9dce0ffd90c1ff28bfeb6b3dab56636e9d8d4a5b363d11cee9b39a7e7f5ffccc6ede291d1cfd2d9423e06b0b99f5b559096f85a6a86baff8a8deef5956d2dd54d53803101fe8549290a1f35081bd932eaeebd1282af9d08af1d2ab6dc6ce795fbba58c825f672443e8f33667e7f17ac6f1df04069f07d01a3ece37e3c08df7181c63ddddebeee81cfc85e6238536248d6ed99eb44ac8d140051e7cc909482b15b1327547f78999b20ada594500f1d7f29602bfcb4eebcf8afba65b79ac5dbfb1263c233bc855dc3e32dc84147e498877a4958dbeed76eb112de883af3847344a2be1fab5df9ca88ae597c5cb59f1529810bd81642e7a37b902ad6bd3e1db37fc2dfa50f0a3d1b1962283ed0b4f266d1366b4db88da9076f"}, {0xf0, 0x102, 0xfffffff9, "46f386ebf01ff615c2ce06662b3bfe97c364ec9954a3e7cf9519176bc2cf5ba6e24668d60d30a4365bec70b3cfeca137b5dd19e5c8504ec630e555af47ecea7283e8d72e7b658b901d0e7231c4a3910f7025351b801b945fb4e5d3fa85a9d867cb88071191dbb249c4552568292699187930df09f1c62986093053c1ca75d2ee816a3ad91798d8c0202520c7f09ee2891cb75187594cd55bd8de7caf67f93b4320e1e4a3db5fb0a27b894648a0a4fd586feef479cbcc0a86aa54e6f42d973f562af9327efa296a7386be0a2f59e9df6fbc713816f950edb462"}, {0x78, 0x1, 0x1, "651f624ed2a921cdf04bd25c0a1ffb29bef2ff05fb9fdea12923610033635691b98ddb0a153c4341db8c21426471a06003f0f78ced3d09163c8257afce86994694fa7182e976af7a682bba4c58a4b922b435bcdad779dc4fb45dabcda011c1fd0b70c70601a1e6"}, {0x108, 0x10b, 0x0, "1d169f3277130d3ff7b18523e03ff80e5dbf2245185340298b1ba232d15243079b1fcaa8df3183fab67da6cb1a77b62933fce55e8e240986acb833e5713108428935c28f9d8c0cb5c2aaf6abae132996c6e9803cd957f5291f85ea7cac105fe547c8422fdf8369b7ca66e2da362edc7549942b6dbffeb72fca1b302a9ad686467e4c1136041a40bc8b6c1133ef340ad437a7f6810572de1da7b12cf451501f5f15dac8056c6efcc902ae958fc6a558eda220c74643837729a46cbadc213bc442cb6c634408c1b6857e4b41edc16b6be9b14a73e9a2dd1e3fbe8e30c5106d3dc224254840279463fa2b0a605c63e1d43c175dfaab"}, {0x30, 0x104, 0x7fffffff, "b8f936fed1a3caf80683acd3aa14142b61017e79397bf6484987"}], 0x1410}, 0x40000) (async) setsockopt$rose(r2, 0x104, 0x4, &(0x7f0000000000), 0x4) (async) 18:54:48 executing program 3: syz_clone(0x4404024e, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:48 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000000)) ioctl$SIOCRSACCEPT(r0, 0x89e3) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000000)) (async) ioctl$SIOCRSACCEPT(r0, 0x89e3) (async) 18:54:48 executing program 5: socketpair(0x2c, 0x3, 0x1000082, &(0x7f0000000000)) 18:54:48 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) r0 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x500, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f00000005c0)={&(0x7f0000000180)={{@host, 0x1}, {@local, 0xfffffff9}, 0x400, "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"}, 0x418, 0x3}) 18:54:48 executing program 4: syz_clone(0x44040308, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:48 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) (async) r0 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x500, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f00000005c0)={&(0x7f0000000180)={{@host, 0x1}, {@local, 0xfffffff9}, 0x400, "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"}, 0x418, 0x3}) 18:54:48 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) socket$key(0xf, 0x3, 0x2) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000040)=0xfffffff7, 0x4) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000080)=0x7f) 18:54:48 executing program 5: socketpair(0x2c, 0x3, 0x1000082, &(0x7f0000000000)) 18:54:48 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair(0x2c, 0x3, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f00000000c0)=0xfa20) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000c855) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:48 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) r0 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x500, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f00000005c0)={&(0x7f0000000180)={{@host, 0x1}, {@local, 0xfffffff9}, 0x400, "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"}, 0x418, 0x3}) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) (async) syz_io_uring_complete(0x0) (async) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x500, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f00000005c0)={&(0x7f0000000180)={{@host, 0x1}, {@local, 0xfffffff9}, 0x400, "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"}, 0x418, 0x3}) (async) 18:54:48 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) socket$key(0xf, 0x3, 0x2) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000040)=0xfffffff7, 0x4) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000080)=0x7f) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) (async) socket$key(0xf, 0x3, 0x2) (async) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000040)=0xfffffff7, 0x4) (async) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000080)=0x7f) (async) 18:54:48 executing program 5: socketpair(0x2c, 0x3, 0x1000082, &(0x7f0000000000)) socketpair(0x2c, 0x3, 0x1000082, &(0x7f0000000000)) (async) 18:54:48 executing program 3: syz_clone(0x44040256, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:48 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair(0x2c, 0x3, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f00000000c0)=0xfa20) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000c855) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) socketpair(0x2c, 0x3, 0x2, &(0x7f0000000000)) (async) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f00000000c0)=0xfa20) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000c855) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) (async) 18:54:48 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0xf0, 0x960, 0xc80, 0x240, 0x9, 0x4, 0x1, 0x2, {0xffff, 0x9, 0x1}, {0x3e0fcae9, 0xdf1}, {0x6, 0x1, 0x1}, {0x401, 0xaa30}, 0x1, 0x80, 0x0, 0x7, 0x1, 0xfffffffd, 0x3, 0x7f, 0x24, 0x1ff, 0x5, 0x2, 0x6, 0x6, 0x0, 0xb}) 18:54:48 executing program 5: syz_io_uring_setup(0xfe8, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_complete(r0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x118, &(0x7f0000000040)=0x1, 0x0, 0x4) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) 18:54:48 executing program 4: syz_clone(0x4404030e, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:48 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) (async, rerun: 32) socket$key(0xf, 0x3, 0x2) (async, rerun: 32) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000040)=0xfffffff7, 0x4) (async, rerun: 64) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000080)=0x7f) (rerun: 64) 18:54:48 executing program 5: syz_io_uring_setup(0xfe8, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_complete(r0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x118, &(0x7f0000000040)=0x1, 0x0, 0x4) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) syz_io_uring_setup(0xfe8, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), 0x0) (async) syz_io_uring_complete(r0) (async) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x118, &(0x7f0000000040)=0x1, 0x0, 0x4) (async) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) (async) 18:54:48 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0xf0, 0x960, 0xc80, 0x240, 0x9, 0x4, 0x1, 0x2, {0xffff, 0x9, 0x1}, {0x3e0fcae9, 0xdf1}, {0x6, 0x1, 0x1}, {0x401, 0xaa30}, 0x1, 0x80, 0x0, 0x7, 0x1, 0xfffffffd, 0x3, 0x7f, 0x24, 0x1ff, 0x5, 0x2, 0x6, 0x6, 0x0, 0xb}) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0xf0, 0x960, 0xc80, 0x240, 0x9, 0x4, 0x1, 0x2, {0xffff, 0x9, 0x1}, {0x3e0fcae9, 0xdf1}, {0x6, 0x1, 0x1}, {0x401, 0xaa30}, 0x1, 0x80, 0x0, 0x7, 0x1, 0xfffffffd, 0x3, 0x7f, 0x24, 0x1ff, 0x5, 0x2, 0x6, 0x6, 0x0, 0xb}) (async) 18:54:48 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair(0x2c, 0x3, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f00000000c0)=0xfa20) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000c855) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) socketpair(0x2c, 0x3, 0x2, &(0x7f0000000000)) (async) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f00000000c0)=0xfa20) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x2000c855) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) (async) 18:54:49 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0xf0, 0x960, 0xc80, 0x240, 0x9, 0x4, 0x1, 0x2, {0xffff, 0x9, 0x1}, {0x3e0fcae9, 0xdf1}, {0x6, 0x1, 0x1}, {0x401, 0xaa30}, 0x1, 0x80, 0x0, 0x7, 0x1, 0xfffffffd, 0x3, 0x7f, 0x24, 0x1ff, 0x5, 0x2, 0x6, 0x6, 0x0, 0xb}) 18:54:49 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f0000000100)) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) accept4$rose(r3, 0x0, &(0x7f00000000c0), 0x80000) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:49 executing program 5: syz_io_uring_setup(0xfe8, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_complete(r0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x118, &(0x7f0000000040)=0x1, 0x0, 0x4) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) syz_io_uring_setup(0xfe8, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), 0x0) (async) syz_io_uring_complete(r0) (async) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x118, &(0x7f0000000040)=0x1, 0x0, 0x4) (async) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) (async) 18:54:49 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000000)=0x9, 0x4) 18:54:49 executing program 1: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xff, 0x76}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3d28f2b2f5785f8aa0afe89d60"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "02e3d1e15c"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20064044}, 0xc011) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r0, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x94}, 0x81) 18:54:49 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f0000000100)) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) accept4$rose(r3, 0x0, &(0x7f00000000c0), 0x80000) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (async) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f0000000100)) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) (async) accept4$rose(r3, 0x0, &(0x7f00000000c0), 0x80000) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) (async) 18:54:49 executing program 3: syz_clone(0x44040262, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:49 executing program 4: syz_clone(0x4404032e, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x28, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2ed6, 0x56}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8004) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r1, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "7e96fb940affa2a93d089bcd04952968"}, @NL80211_ATTR_PMK={0x14, 0xfe, "0f10efc033e668d5b7aaa4a3d9f189d7"}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000840) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r3) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="880000001855297e8102c7041e87d1d62370147d4e1310e73e8ab2ea415a4c5f910e63b78ddb06ddb01779b70724eb22e4bac91b75f6b6c7ef0d29a181faa1c838dcfb24957592652f5c3750d0d93aff300e5d29690114b4fec20ce2201d1ab83551ff2d9d6cee", @ANYRES16=r5, @ANYRES32=r6], 0x88}, 0x1, 0x0, 0x0, 0x8010}, 0x4) 18:54:49 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000000)=0x9, 0x4) 18:54:49 executing program 1: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xff, 0x76}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3d28f2b2f5785f8aa0afe89d60"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "02e3d1e15c"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20064044}, 0xc011) (async) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r0, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x94}, 0x81) 18:54:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x28, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2ed6, 0x56}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8004) (async) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r1, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "7e96fb940affa2a93d089bcd04952968"}, @NL80211_ATTR_PMK={0x14, 0xfe, "0f10efc033e668d5b7aaa4a3d9f189d7"}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000840) (async) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r3) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="880000001855297e8102c7041e87d1d62370147d4e1310e73e8ab2ea415a4c5f910e63b78ddb06ddb01779b70724eb22e4bac91b75f6b6c7ef0d29a181faa1c838dcfb24957592652f5c3750d0d93aff300e5d29690114b4fec20ce2201d1ab83551ff2d9d6cee", @ANYRES16=r5, @ANYRES32=r6], 0x88}, 0x1, 0x0, 0x0, 0x8010}, 0x4) 18:54:49 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f0000000100)) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) accept4$rose(r3, 0x0, &(0x7f00000000c0), 0x80000) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (async) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f0000000100)) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) (async) accept4$rose(r3, 0x0, &(0x7f00000000c0), 0x80000) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) (async) 18:54:49 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000000)=0x9, 0x4) 18:54:49 executing program 1: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xff, 0x76}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3d28f2b2f5785f8aa0afe89d60"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "02e3d1e15c"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20064044}, 0xc011) (async) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r0, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x94}, 0x81) 18:54:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x28, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2ed6, 0x56}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8004) (async) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r1, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "7e96fb940affa2a93d089bcd04952968"}, @NL80211_ATTR_PMK={0x14, 0xfe, "0f10efc033e668d5b7aaa4a3d9f189d7"}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000840) (async) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r3) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) (async) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="880000001855297e8102c7041e87d1d62370147d4e1310e73e8ab2ea415a4c5f910e63b78ddb06ddb01779b70724eb22e4bac91b75f6b6c7ef0d29a181faa1c838dcfb24957592652f5c3750d0d93aff300e5d29690114b4fec20ce2201d1ab83551ff2d9d6cee", @ANYRES16=r5, @ANYRES32=r6], 0x88}, 0x1, 0x0, 0x0, 0x8010}, 0x4) 18:54:49 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) setsockopt$rose(0xffffffffffffffff, 0x104, 0x6, &(0x7f0000000040)=0x1, 0x4) r1 = io_uring_setup(0x14a3, &(0x7f00000000c0)={0x0, 0xb391, 0x1, 0x2, 0x41}) pselect6(0x40, &(0x7f0000000140)={0xf7, 0x8, 0x2b, 0x10001, 0x7, 0x5, 0x7, 0x9}, &(0x7f0000000180)={0x401, 0x0, 0xde, 0x0, 0x100, 0x81, 0x0, 0x80000000}, &(0x7f00000001c0)={0x5, 0xffffffffffffffff, 0x80, 0x7e6, 0x5, 0x10001, 0x9, 0x1ff}, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000280)={&(0x7f0000000240)={[0x4]}, 0x8}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x2010, r1, 0x10000000) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = syz_clone(0x80000000, &(0x7f00000002c0)="f82f9af2fd66b136401e5be7fbc6e0d7cd3040b9ec8e38158d2ff70b04668f4fc44220c14c9a8182b97c3932f995b8ea8871bf8adc97d66a8979d17d37b8b664557f26dc35d4097961b28b49e582abe4536c2a6cdbd31ab97930d4ffe0c9a2a33269fb7a8d17afc909e7742ae973af7becedcdf0c70f00818568d074e515ba81b2d74496adb430071817fb2c856368959644d535f08e74fdc896a5181c941f9d7250", 0xa2, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="75a395c8c308c230ed913132ea597806000dea35e3a1f99831b654194c107cb5f8f2f7d64c1e79a04c0a9ef930e8d9142215a147d0d1a985db085316e6f43d5b3709b734b8ad8656f868d3e08eac35d2f3922e155f786976f5709909cdc955d4d901fef3d72b32231505bf373ee68d") sched_rr_get_interval(r3, &(0x7f0000000480)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) setsockopt$rose(0xffffffffffffffff, 0x104, 0x4, &(0x7f0000000080)=0x1, 0x4) 18:54:49 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x5, &(0x7f0000000040), 0x4) 18:54:49 executing program 3: syz_clone(0x44040276, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:49 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000006c0)={&(0x7f0000000180), 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x414, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1e30}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}]}}]}, 0x414}, 0x1, 0x0, 0x0, 0x8810}, 0x4004004) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r3, 0x0, &(0x7f0000000040), 0x81800) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) socketpair(0x18, 0x2, 0x0, &(0x7f0000000080)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r6, 0x89e5, &(0x7f0000000100)=@bcast) 18:54:49 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 18:54:49 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x5, &(0x7f0000000040), 0x4) setsockopt$rose(0xffffffffffffffff, 0x104, 0x5, &(0x7f0000000040), 0x4) (async) 18:54:49 executing program 4: syz_clone(0x44040358, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:49 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) (async) setsockopt$rose(0xffffffffffffffff, 0x104, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) r1 = io_uring_setup(0x14a3, &(0x7f00000000c0)={0x0, 0xb391, 0x1, 0x2, 0x41}) (async) pselect6(0x40, &(0x7f0000000140)={0xf7, 0x8, 0x2b, 0x10001, 0x7, 0x5, 0x7, 0x9}, &(0x7f0000000180)={0x401, 0x0, 0xde, 0x0, 0x100, 0x81, 0x0, 0x80000000}, &(0x7f00000001c0)={0x5, 0xffffffffffffffff, 0x80, 0x7e6, 0x5, 0x10001, 0x9, 0x1ff}, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000280)={&(0x7f0000000240)={[0x4]}, 0x8}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x2010, r1, 0x10000000) (async) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r3 = syz_clone(0x80000000, &(0x7f00000002c0)="f82f9af2fd66b136401e5be7fbc6e0d7cd3040b9ec8e38158d2ff70b04668f4fc44220c14c9a8182b97c3932f995b8ea8871bf8adc97d66a8979d17d37b8b664557f26dc35d4097961b28b49e582abe4536c2a6cdbd31ab97930d4ffe0c9a2a33269fb7a8d17afc909e7742ae973af7becedcdf0c70f00818568d074e515ba81b2d74496adb430071817fb2c856368959644d535f08e74fdc896a5181c941f9d7250", 0xa2, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="75a395c8c308c230ed913132ea597806000dea35e3a1f99831b654194c107cb5f8f2f7d64c1e79a04c0a9ef930e8d9142215a147d0d1a985db085316e6f43d5b3709b734b8ad8656f868d3e08eac35d2f3922e155f786976f5709909cdc955d4d901fef3d72b32231505bf373ee68d") sched_rr_get_interval(r3, &(0x7f0000000480)) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) (async) setsockopt$rose(0xffffffffffffffff, 0x104, 0x4, &(0x7f0000000080)=0x1, 0x4) 18:54:49 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000006c0)={&(0x7f0000000180), 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x414, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1e30}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}]}}]}, 0x414}, 0x1, 0x0, 0x0, 0x8810}, 0x4004004) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r3, 0x0, &(0x7f0000000040), 0x81800) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) socketpair(0x18, 0x2, 0x0, &(0x7f0000000080)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r6, 0x89e5, &(0x7f0000000100)=@bcast) 18:54:49 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) (async) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) 18:54:49 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x5, &(0x7f0000000040), 0x4) 18:54:49 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) (async) setsockopt$rose(0xffffffffffffffff, 0x104, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) r1 = io_uring_setup(0x14a3, &(0x7f00000000c0)={0x0, 0xb391, 0x1, 0x2, 0x41}) (rerun: 32) pselect6(0x40, &(0x7f0000000140)={0xf7, 0x8, 0x2b, 0x10001, 0x7, 0x5, 0x7, 0x9}, &(0x7f0000000180)={0x401, 0x0, 0xde, 0x0, 0x100, 0x81, 0x0, 0x80000000}, &(0x7f00000001c0)={0x5, 0xffffffffffffffff, 0x80, 0x7e6, 0x5, 0x10001, 0x9, 0x1ff}, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000280)={&(0x7f0000000240)={[0x4]}, 0x8}) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x2010, r1, 0x10000000) (async, rerun: 32) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (rerun: 32) r3 = syz_clone(0x80000000, &(0x7f00000002c0)="f82f9af2fd66b136401e5be7fbc6e0d7cd3040b9ec8e38158d2ff70b04668f4fc44220c14c9a8182b97c3932f995b8ea8871bf8adc97d66a8979d17d37b8b664557f26dc35d4097961b28b49e582abe4536c2a6cdbd31ab97930d4ffe0c9a2a33269fb7a8d17afc909e7742ae973af7becedcdf0c70f00818568d074e515ba81b2d74496adb430071817fb2c856368959644d535f08e74fdc896a5181c941f9d7250", 0xa2, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="75a395c8c308c230ed913132ea597806000dea35e3a1f99831b654194c107cb5f8f2f7d64c1e79a04c0a9ef930e8d9142215a147d0d1a985db085316e6f43d5b3709b734b8ad8656f868d3e08eac35d2f3922e155f786976f5709909cdc955d4d901fef3d72b32231505bf373ee68d") sched_rr_get_interval(r3, &(0x7f0000000480)) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) (async, rerun: 64) setsockopt$rose(0xffffffffffffffff, 0x104, 0x4, &(0x7f0000000080)=0x1, 0x4) (rerun: 64) 18:54:49 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) (async) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 18:54:49 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x4, &(0x7f0000000000), 0x4) 18:54:50 executing program 3: syz_clone(0x4404028b, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:50 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000006c0)={&(0x7f0000000180), 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x414, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1e30}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}]}}]}, 0x414}, 0x1, 0x0, 0x0, 0x8810}, 0x4004004) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r3, 0x0, &(0x7f0000000040), 0x81800) (async) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) (async) socketpair(0x18, 0x2, 0x0, &(0x7f0000000080)) (async) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) (async) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r6, 0x89e5, &(0x7f0000000100)=@bcast) 18:54:50 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r1, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044091}, 0x4000890) 18:54:50 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x4, &(0x7f0000000000), 0x4) setsockopt$rose(0xffffffffffffffff, 0x104, 0x4, &(0x7f0000000000), 0x4) (async) 18:54:50 executing program 0: ioctl$IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, &(0x7f0000000040)=0x80000) r0 = syz_io_uring_complete(0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r1}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x4, &(0x7f0000000000), 0x4) 18:54:50 executing program 4: syz_clone(0x44040368, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:50 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x4, &(0x7f0000000000), 0x4) setsockopt$rose(0xffffffffffffffff, 0x104, 0x4, &(0x7f0000000000), 0x4) (async) 18:54:50 executing program 0: ioctl$IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, &(0x7f0000000040)=0x80000) r0 = syz_io_uring_complete(0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r1}) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x4, &(0x7f0000000000), 0x4) 18:54:50 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r1, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044091}, 0x4000890) 18:54:50 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:50 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r1, 0x7aa, &(0x7f0000000200)={{@host, 0x10001}, 0xfff, 0x4}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r2, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f0000000180)=0x1) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000001c0)={{@local, 0xff}, 0x1f, 0x4, 0x8c6f, 0x701, 0x9, 0xd0, 0x8, 0x7d}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) setsockopt$rose(r4, 0x104, 0x4, 0x0, 0x0) 18:54:50 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r1, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044091}, 0x4000890) 18:54:50 executing program 3: syz_clone(0x440402ae, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:50 executing program 0: ioctl$IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, &(0x7f0000000040)=0x80000) r0 = syz_io_uring_complete(0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r1}) (async, rerun: 32) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x4, &(0x7f0000000000), 0x4) 18:54:50 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:50 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r1, 0x7aa, &(0x7f0000000200)={{@host, 0x10001}, 0xfff, 0x4}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r2, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f0000000180)=0x1) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000001c0)={{@local, 0xff}, 0x1f, 0x4, 0x8c6f, 0x701, 0x9, 0xd0, 0x8, 0x7d}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) setsockopt$rose(r4, 0x104, 0x4, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r1, 0x7aa, &(0x7f0000000200)={{@host, 0x10001}, 0xfff, 0x4}) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r2, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f0000000180)=0x1) (async) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000001c0)={{@local, 0xff}, 0x1f, 0x4, 0x8c6f, 0x701, 0x9, 0xd0, 0x8, 0x7d}) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) (async) setsockopt$rose(r4, 0x104, 0x4, 0x0, 0x0) (async) 18:54:50 executing program 5: socketpair(0x22, 0x2, 0x6, &(0x7f0000000000)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@host, 0x80}) 18:54:50 executing program 4: syz_clone(0x44040380, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:50 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) (async) [ 1668.535510][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.535563][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 18:54:50 executing program 5: socketpair(0x22, 0x2, 0x6, &(0x7f0000000000)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@host, 0x80}) socketpair(0x22, 0x2, 0x6, &(0x7f0000000000)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@host, 0x80}) (async) 18:54:50 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000018, 0x12, r1, 0x10000000) 18:54:50 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r1, 0x7aa, &(0x7f0000000200)={{@host, 0x10001}, 0xfff, 0x4}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r2, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f0000000180)=0x1) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000001c0)={{@local, 0xff}, 0x1f, 0x4, 0x8c6f, 0x701, 0x9, 0xd0, 0x8, 0x7d}) (async) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) (async) setsockopt$rose(r4, 0x104, 0x4, 0x0, 0x0) 18:54:50 executing program 5: socketpair(0x22, 0x2, 0x6, &(0x7f0000000000)) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@host, 0x80}) 18:54:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r4}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r7}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x18c}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x9, 0xfffffffe}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0xdc7f, 0x7, 0x5, 0x8, 0x3, 0xb1, 0x8538, 0xfb]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x44000) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) 18:54:50 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000018, 0x12, r1, 0x10000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000018, 0x12, r1, 0x10000000) (async) 18:54:50 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000f1dd8f894d1e3191cae3df7dc8675900f52cb7d7237be7", @ANYRES16=r3, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r7}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x140080}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r3, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x35}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0x40003}, 0x20040000) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) socketpair(0x2, 0x6, 0x7fffffff, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r8, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r3, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x40}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000014) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x480040, 0x0) 18:54:50 executing program 3: syz_clone(0x440402b6, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:50 executing program 5: socketpair(0x26, 0xa, 0x6, &(0x7f0000000000)) 18:54:50 executing program 4: syz_clone(0x4404039a, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r4}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r7}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x18c}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x9, 0xfffffffe}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0xdc7f, 0x7, 0x5, 0x8, 0x3, 0xb1, 0x8538, 0xfb]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x44000) (async) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) 18:54:50 executing program 5: socketpair(0x26, 0xa, 0x6, &(0x7f0000000000)) 18:54:50 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async, rerun: 64) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000018, 0x12, r1, 0x10000000) (rerun: 64) 18:54:50 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000f1dd8f894d1e3191cae3df7dc8675900f52cb7d7237be7", @ANYRES16=r3, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r7}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x140080}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r3, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x35}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0x40003}, 0x20040000) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) socketpair(0x2, 0x6, 0x7fffffff, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r8, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r3, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x40}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000014) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x480040, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (async) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000200)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000f1dd8f894d1e3191cae3df7dc8675900f52cb7d7237be7", @ANYRES16=r3, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r7}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x140080}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r3, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x35}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0x40003}, 0x20040000) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) (async) socketpair(0x2, 0x6, 0x7fffffff, &(0x7f0000000280)) (async) sendmsg$NL80211_CMD_STOP_AP(r8, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r3, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x40}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000014) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x480040, 0x0) (async) 18:54:50 executing program 5: socketpair(0x26, 0xa, 0x6, &(0x7f0000000000)) socketpair(0x26, 0xa, 0x6, &(0x7f0000000000)) (async) 18:54:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r4}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r7}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x18c}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x9, 0xfffffffe}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0xdc7f, 0x7, 0x5, 0x8, 0x3, 0xb1, 0x8538, 0xfb]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x44000) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) 18:54:50 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000040)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x7111c0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001300)={0x5c, 0x0, &(0x7f0000001180)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000010c0)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, 0x1b}, @fda={0x66646185, 0xa, 0x0, 0x25}}, &(0x7f0000001140)={0x0, 0x18, 0x40}}}, @request_death={0x400c630e, 0x1}, @release={0x40046306, 0x1}], 0xe6, 0x0, &(0x7f0000001200)="cf0013a484f73a53844fc55fa4617e9606eecc9e55a85052e39aeef5d5fd8f4b015ab1fb416fca988d1aeda8b21e5b2dc11beb25817374e0459a91afc56fe965e318d30292b72b31ea94d5130c6d746c69460538122d5cd175bbcb98dbbef7cab79abb72082ef719246e38404ef7cde747efcefd5e58b2da66cbba8ed32df01ba2acda0129989fbbb38c634baa0597db34fb0bda5336e9bf77eaa952d40291e50d8255db8b3fe30ffbbeec414b6435015dde07353596ec326daa742ea932a9c48d298c025397b68612a54f3679b0031003a1bd9c16c84454c7624fa60b2162ff458333e0a778"}) 18:54:50 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000f1dd8f894d1e3191cae3df7dc8675900f52cb7d7237be7", @ANYRES16=r3, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r7}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x140080}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r3, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x35}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0x40003}, 0x20040000) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) socketpair(0x2, 0x6, 0x7fffffff, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r8, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r3, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x40}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000014) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x480040, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (async) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000200)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000f1dd8f894d1e3191cae3df7dc8675900f52cb7d7237be7", @ANYRES16=r3, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r7}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x140080}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r3, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x35}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0x40003}, 0x20040000) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) (async) socketpair(0x2, 0x6, 0x7fffffff, &(0x7f0000000280)) (async) sendmsg$NL80211_CMD_STOP_AP(r8, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r3, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x40}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000014) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x480040, 0x0) (async) 18:54:50 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x5, 0x400, 0x0, 0x3ff, 0x2, 0x1}, 0x9) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x7, 0x3, 0xd, 0x13, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x1, 0x0, 0x0, 0x0, 0x3, {0x6, 0x32, 0x0, 0x1, 0x0, 0x10001, 0x0, @in=@loopback, @in=@multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x6e6bb3, 0x1, {0x6, 0x33, 0x1, 0x9, 0x0, 0x9, 0x0, @in=@multicast2, @in=@multicast1}}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}]}, 0x98}}, 0x0) 18:54:51 executing program 3: syz_clone(0x440402c2, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x400}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x3c6680df0859ebc0}, 0x80) r2 = syz_io_uring_complete(0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x1, &(0x7f0000000000)=0x10, 0x4) ioctl$FBIOBLANK(r2, 0x4611, 0x0) 18:54:51 executing program 4: syz_clone(0x440403a0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x400}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x3c6680df0859ebc0}, 0x80) r2 = syz_io_uring_complete(0x0) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x1, &(0x7f0000000000)=0x10, 0x4) ioctl$FBIOBLANK(r2, 0x4611, 0x0) 18:54:51 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) (async) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000040)) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x7111c0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001300)={0x5c, 0x0, &(0x7f0000001180)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000010c0)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, 0x1b}, @fda={0x66646185, 0xa, 0x0, 0x25}}, &(0x7f0000001140)={0x0, 0x18, 0x40}}}, @request_death={0x400c630e, 0x1}, @release={0x40046306, 0x1}], 0xe6, 0x0, &(0x7f0000001200)="cf0013a484f73a53844fc55fa4617e9606eecc9e55a85052e39aeef5d5fd8f4b015ab1fb416fca988d1aeda8b21e5b2dc11beb25817374e0459a91afc56fe965e318d30292b72b31ea94d5130c6d746c69460538122d5cd175bbcb98dbbef7cab79abb72082ef719246e38404ef7cde747efcefd5e58b2da66cbba8ed32df01ba2acda0129989fbbb38c634baa0597db34fb0bda5336e9bf77eaa952d40291e50d8255db8b3fe30ffbbeec414b6435015dde07353596ec326daa742ea932a9c48d298c025397b68612a54f3679b0031003a1bd9c16c84454c7624fa60b2162ff458333e0a778"}) 18:54:51 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x5, 0x400, 0x0, 0x3ff, 0x2, 0x1}, 0x9) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x7, 0x3, 0xd, 0x13, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x1, 0x0, 0x0, 0x0, 0x3, {0x6, 0x32, 0x0, 0x1, 0x0, 0x10001, 0x0, @in=@loopback, @in=@multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x6e6bb3, 0x1, {0x6, 0x33, 0x1, 0x9, 0x0, 0x9, 0x0, @in=@multicast2, @in=@multicast1}}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}]}, 0x98}}, 0x0) 18:54:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x400}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x3c6680df0859ebc0}, 0x80) (async) r2 = syz_io_uring_complete(0x0) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x1, &(0x7f0000000000)=0x10, 0x4) ioctl$FBIOBLANK(r2, 0x4611, 0x0) 18:54:51 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x5, 0x400, 0x0, 0x3ff, 0x2, 0x1}, 0x9) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x7, 0x3, 0xd, 0x13, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x1, 0x0, 0x0, 0x0, 0x3, {0x6, 0x32, 0x0, 0x1, 0x0, 0x10001, 0x0, @in=@loopback, @in=@multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x6e6bb3, 0x1, {0x6, 0x33, 0x1, 0x9, 0x0, 0x9, 0x0, @in=@multicast2, @in=@multicast1}}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}]}, 0x98}}, 0x0) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x5, 0x400, 0x0, 0x3ff, 0x2, 0x1}, 0x9) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) (async) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x7, 0x3, 0xd, 0x13, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x1, 0x0, 0x0, 0x0, 0x3, {0x6, 0x32, 0x0, 0x1, 0x0, 0x10001, 0x0, @in=@loopback, @in=@multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x6e6bb3, 0x1, {0x6, 0x33, 0x1, 0x9, 0x0, 0x9, 0x0, @in=@multicast2, @in=@multicast1}}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}]}, 0x98}}, 0x0) (async) 18:54:51 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000040)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x7111c0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001300)={0x5c, 0x0, &(0x7f0000001180)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000010c0)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, 0x1b}, @fda={0x66646185, 0xa, 0x0, 0x25}}, &(0x7f0000001140)={0x0, 0x18, 0x40}}}, @request_death={0x400c630e, 0x1}, @release={0x40046306, 0x1}], 0xe6, 0x0, &(0x7f0000001200)="cf0013a484f73a53844fc55fa4617e9606eecc9e55a85052e39aeef5d5fd8f4b015ab1fb416fca988d1aeda8b21e5b2dc11beb25817374e0459a91afc56fe965e318d30292b72b31ea94d5130c6d746c69460538122d5cd175bbcb98dbbef7cab79abb72082ef719246e38404ef7cde747efcefd5e58b2da66cbba8ed32df01ba2acda0129989fbbb38c634baa0597db34fb0bda5336e9bf77eaa952d40291e50d8255db8b3fe30ffbbeec414b6435015dde07353596ec326daa742ea932a9c48d298c025397b68612a54f3679b0031003a1bd9c16c84454c7624fa60b2162ff458333e0a778"}) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) (async) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000040)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x7111c0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001300)={0x5c, 0x0, &(0x7f0000001180)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000010c0)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/4096, 0x1000, 0x0, 0x1b}, @fda={0x66646185, 0xa, 0x0, 0x25}}, &(0x7f0000001140)={0x0, 0x18, 0x40}}}, @request_death={0x400c630e, 0x1}, @release={0x40046306, 0x1}], 0xe6, 0x0, &(0x7f0000001200)="cf0013a484f73a53844fc55fa4617e9606eecc9e55a85052e39aeef5d5fd8f4b015ab1fb416fca988d1aeda8b21e5b2dc11beb25817374e0459a91afc56fe965e318d30292b72b31ea94d5130c6d746c69460538122d5cd175bbcb98dbbef7cab79abb72082ef719246e38404ef7cde747efcefd5e58b2da66cbba8ed32df01ba2acda0129989fbbb38c634baa0597db34fb0bda5336e9bf77eaa952d40291e50d8255db8b3fe30ffbbeec414b6435015dde07353596ec326daa742ea932a9c48d298c025397b68612a54f3679b0031003a1bd9c16c84454c7624fa60b2162ff458333e0a778"}) (async) 18:54:51 executing program 5: sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3a}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xbf485ea0d08498ed}, 0x4010) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) 18:54:51 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x3, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 18:54:51 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x4, &(0x7f0000000000), 0x4) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null, @bcast, @null]}) socket$kcm(0x29, 0x2, 0x0) 18:54:51 executing program 3: syz_clone(0x440402d6, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:51 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r3, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x12}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1db}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffb4d}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x44010) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x13f, 0x8}}, 0x20) 18:54:51 executing program 4: syz_clone(0x440403bc, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:51 executing program 5: sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3a}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xbf485ea0d08498ed}, 0x4010) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3a}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xbf485ea0d08498ed}, 0x4010) (async) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) (async) 18:54:51 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x4, &(0x7f0000000000), 0x4) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null, @bcast, @null]}) socket$kcm(0x29, 0x2, 0x0) setsockopt$rose(0xffffffffffffffff, 0x104, 0x4, &(0x7f0000000000), 0x4) (async) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null, @bcast, @null]}) (async) socket$kcm(0x29, 0x2, 0x0) (async) 18:54:51 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x3, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x3, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) 18:54:51 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x4, &(0x7f0000000000), 0x4) (async) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null, @bcast, @null]}) socket$kcm(0x29, 0x2, 0x0) 18:54:51 executing program 5: sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3a}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xbf485ea0d08498ed}, 0x4010) (async) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) 18:54:52 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x3, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 18:54:52 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf47e}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x8014) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x7}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x4000000) 18:54:52 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x60004091) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="59734d8d84e0a54af6140200000000000000428212c5225778b4ca6ae0051b62d9f0b7dfab7bb7353d12cd8289c025c128608559e69ad140a2e7b3d0717f1d8b740cbda50276bf178caba2edcd0027b2c44a59099f7d3e49ef86839a125cca97a2388ec533de41c963a414dea9912f9776acca001eee86ab4229c5fce0af1a5052373f3c3e3c552f17c9e526cc0d6aa0e93d9a625720928feece05bec6c05bec0e4e0f0e19c8a11084706eafe7e69ab00d64b2e1e877e1b3efce0d6eb88901eedb2bfebd3af5a2b1b084a5f937937ae048d03039", @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf250d00000028000380140006000000000000000000000000000000000008000500ffffffff080003000400000008000500000100000c000380050008007f00000008000400b7cef74e0800040042000000080006004e070000"], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) 18:54:52 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f00000000c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @default}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001280)={&(0x7f00000003c0)={0x19c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_VENDOR_DATA={0xb1, 0xc5, "b43301dc4ed78c0bc4b3964ee2ff57b60f206848a7fb2d53bc73f7e583602dcc18a5b81d5db2b8a749fa8729aa794180aa095d73504e6d4538b93cfa08143ca347d22a664f4dd1c551d7165e178a5f16987d58566de8ef3e7efc7f47ad5c2a4517c75a404382b8051363396131bd3c050f294804b993891269919874c79f1c59ef57957e7ba4207e8d93886489e376d3c52c9e56ee17f4a2e63ac2b4a1d87b2a79e3078c5d1441c65490e1c5e6"}, @NL80211_ATTR_VENDOR_DATA={0xa6, 0xc5, "e08bd1e2bd96f30b83030e764926879663b05f3df4d34442aec81007ff840c4691e2b6fa6d687a8240a74a1297d9e72871246a68f06f041f4d83e3deb68bee59425a42159168fe45df2400a9679b483f3b3f84675ffe0ff60075be103986db02a709b099e82ea155d13c28744d3fed5b9107ce8749707880e53b4cac241fb933c0e31235072d12b0e29bcc19ac7d26e1aea18a0cb9455b3baea4934a495a3b0be2fc"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x37a4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4e}]}, 0x19c}, 0x1, 0x0, 0x0, 0x200080c4}, 0x400) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:52 executing program 3: syz_clone(0x440402ec, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:52 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf47e}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x8014) (async) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x7}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x4000000) 18:54:52 executing program 4: syz_clone(0x440403c4, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:52 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x60004091) (async) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="59734d8d84e0a54af6140200000000000000428212c5225778b4ca6ae0051b62d9f0b7dfab7bb7353d12cd8289c025c128608559e69ad140a2e7b3d0717f1d8b740cbda50276bf178caba2edcd0027b2c44a59099f7d3e49ef86839a125cca97a2388ec533de41c963a414dea9912f9776acca001eee86ab4229c5fce0af1a5052373f3c3e3c552f17c9e526cc0d6aa0e93d9a625720928feece05bec6c05bec0e4e0f0e19c8a11084706eafe7e69ab00d64b2e1e877e1b3efce0d6eb88901eedb2bfebd3af5a2b1b084a5f937937ae048d03039", @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf250d00000028000380140006000000000000000000000000000000000008000500ffffffff080003000400000008000500000100000c000380050008007f00000008000400b7cef74e0800040042000000080006004e070000"], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) 18:54:52 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f00000000c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @default}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001280)={&(0x7f00000003c0)={0x19c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_VENDOR_DATA={0xb1, 0xc5, "b43301dc4ed78c0bc4b3964ee2ff57b60f206848a7fb2d53bc73f7e583602dcc18a5b81d5db2b8a749fa8729aa794180aa095d73504e6d4538b93cfa08143ca347d22a664f4dd1c551d7165e178a5f16987d58566de8ef3e7efc7f47ad5c2a4517c75a404382b8051363396131bd3c050f294804b993891269919874c79f1c59ef57957e7ba4207e8d93886489e376d3c52c9e56ee17f4a2e63ac2b4a1d87b2a79e3078c5d1441c65490e1c5e6"}, @NL80211_ATTR_VENDOR_DATA={0xa6, 0xc5, "e08bd1e2bd96f30b83030e764926879663b05f3df4d34442aec81007ff840c4691e2b6fa6d687a8240a74a1297d9e72871246a68f06f041f4d83e3deb68bee59425a42159168fe45df2400a9679b483f3b3f84675ffe0ff60075be103986db02a709b099e82ea155d13c28744d3fed5b9107ce8749707880e53b4cac241fb933c0e31235072d12b0e29bcc19ac7d26e1aea18a0cb9455b3baea4934a495a3b0be2fc"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x37a4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4e}]}, 0x19c}, 0x1, 0x0, 0x0, 0x200080c4}, 0x400) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:52 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r3, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x12}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1db}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffb4d}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x44010) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x13f, 0x8}}, 0x20) 18:54:52 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f00000000c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @default}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001280)={&(0x7f00000003c0)={0x19c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@NL80211_ATTR_VENDOR_DATA={0xb1, 0xc5, "b43301dc4ed78c0bc4b3964ee2ff57b60f206848a7fb2d53bc73f7e583602dcc18a5b81d5db2b8a749fa8729aa794180aa095d73504e6d4538b93cfa08143ca347d22a664f4dd1c551d7165e178a5f16987d58566de8ef3e7efc7f47ad5c2a4517c75a404382b8051363396131bd3c050f294804b993891269919874c79f1c59ef57957e7ba4207e8d93886489e376d3c52c9e56ee17f4a2e63ac2b4a1d87b2a79e3078c5d1441c65490e1c5e6"}, @NL80211_ATTR_VENDOR_DATA={0xa6, 0xc5, "e08bd1e2bd96f30b83030e764926879663b05f3df4d34442aec81007ff840c4691e2b6fa6d687a8240a74a1297d9e72871246a68f06f041f4d83e3deb68bee59425a42159168fe45df2400a9679b483f3b3f84675ffe0ff60075be103986db02a709b099e82ea155d13c28744d3fed5b9107ce8749707880e53b4cac241fb933c0e31235072d12b0e29bcc19ac7d26e1aea18a0cb9455b3baea4934a495a3b0be2fc"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x37a4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4e}]}, 0x19c}, 0x1, 0x0, 0x0, 0x200080c4}, 0x400) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:52 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async, rerun: 64) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf47e}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x8014) (async, rerun: 64) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x7}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x4000000) 18:54:52 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x60004091) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="59734d8d84e0a54af6140200000000000000428212c5225778b4ca6ae0051b62d9f0b7dfab7bb7353d12cd8289c025c128608559e69ad140a2e7b3d0717f1d8b740cbda50276bf178caba2edcd0027b2c44a59099f7d3e49ef86839a125cca97a2388ec533de41c963a414dea9912f9776acca001eee86ab4229c5fce0af1a5052373f3c3e3c552f17c9e526cc0d6aa0e93d9a625720928feece05bec6c05bec0e4e0f0e19c8a11084706eafe7e69ab00d64b2e1e877e1b3efce0d6eb88901eedb2bfebd3af5a2b1b084a5f937937ae048d03039", @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf250d00000028000380140006000000000000000000000000000000000008000500ffffffff080003000400000008000500000100000c000380050008007f00000008000400b7cef74e0800040042000000080006004e070000"], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x60004091) (async) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="59734d8d84e0a54af6140200000000000000428212c5225778b4ca6ae0051b62d9f0b7dfab7bb7353d12cd8289c025c128608559e69ad140a2e7b3d0717f1d8b740cbda50276bf178caba2edcd0027b2c44a59099f7d3e49ef86839a125cca97a2388ec533de41c963a414dea9912f9776acca001eee86ab4229c5fce0af1a5052373f3c3e3c552f17c9e526cc0d6aa0e93d9a625720928feece05bec6c05bec0e4e0f0e19c8a11084706eafe7e69ab00d64b2e1e877e1b3efce0d6eb88901eedb2bfebd3af5a2b1b084a5f937937ae048d03039", @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf250d00000028000380140006000000000000000000000000000000000008000500ffffffff080003000400000008000500000100000c000380050008007f00000008000400b7cef74e0800040042000000080006004e070000"], 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) (async) 18:54:52 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb26b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8265}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x55}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x20004001) 18:54:52 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair(0x1f, 0x800, 0x7ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$rose(r2, &(0x7f0000001200)="dbbd38ca2655ca311580ed533a46763b0ea83eb60bcfab293b934e49f4aed7f54db755cfa9e53d65b51ec3e794b05b32bbcebbea065073c6f1e67dc5c113113759cc220e118db59b57942dd5241a97", 0x4f, 0x2000000, &(0x7f0000001140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40) syz_io_uring_setup(0xfe8, &(0x7f0000000300)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)=0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000010c0), 0x3, 0x2) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000001100)={0x1, {0xffffffff, 0x8, 0x6, 0x3}, {0x1ff, 0x7, 0x2, 0x2}, {0x7, 0xfffffff9}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@cb_func]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_io_uring_complete(r3) syz_io_uring_setup(0x4cd6, &(0x7f0000000480)={0x0, 0xd3a3, 0x10, 0x0, 0x312}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000500), &(0x7f0000000540)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000600)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r2, 0x80, &(0x7f0000000580)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x1000) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @link_local, 'dummy0\x00'}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)="38ad4534b805d6f9cad100ad5a7f5168d8202ffc931687452c49919d3bab85ca21f5a208647b085b6f04a26b1a6167b1cd20dc162869462f60ce7915811394d5685115cab6239a9f6c0745ae965999f7ff411b7f9c0ff8c50dd440779481b5a4e82ad5b7a2b00ac1aba821086ba10026f6570bcf0d53565533e165f1c8a54224e04f3e0dcd96ad91351695d0abde0586aa344837bef2e952e2b998938cd6aebd4b0bd35fe48a22fb600a2e3d9f13a91127d5d16a32c0b7", 0xb7}, {&(0x7f0000000200)="9d85cdff34b5dde75740719ac64b58b515e181995b5178fb82ad3bfe55549a92bed6ede4ee7611e1f3490fdd63984ff96e849f354eea59989de26624898cfecdf14e8e23f0b53edc6fa09c304f95395e3a049a863754e5d9031671e17a2339b72d92b529069bd850a01437e0c2ab64e67d51804de08cf834a585a43095b5d896e6510da46e20f7285b8bbabbb48f8a9cda5c11b4ac2139b93244786a569c7bbbdfd2b95a0d3045e1407235ac2f600eb5d06eca51f4ad896b8b0284bb55", 0xbd}, {&(0x7f00000002c0)="5adab0b59b8850a0", 0x8}], 0x3, &(0x7f0000000340)=[{0x30, 0x110, 0x401, "e9637bb01569d7f884646796fcb51ce5c2bfa84e577041a94fa187d10bd22e"}, {0xb8, 0x6, 0x3, "8ce742b376e27358930d7042ea00ce0d5127983791cd2aa487739a61f25cc9d35a35600e2de3b602def980012bf4aa89aab378d41eb02bb3ba6e7488c16b24ad0eb04bf3c630b040c74f24e652c09321ea9145502d93cad085f95fe803f86389fd1e657f97b854526db7592ea225b99d81a6183bcbe36fd5db9b9919a4cdc1a62b708ad93f7ae4fb77c965c9931a68ece685da63e43b99974fcdca166d37c8e72db0f97d"}], 0xe8}, 0x4040004) socket$packet(0x11, 0x3, 0x300) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001380)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001780)={&(0x7f00000013c0)={0x39c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9d87}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x8c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040044) ioctl$FBIOPUT_CON2FBMAP(r7, 0x4610, &(0x7f0000001280)={0x1c, 0x1}) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:52 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb26b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8265}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x55}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x20004001) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb26b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8265}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x55}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x20004001) (async) 18:54:53 executing program 3: syz_clone(0x44040300, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:53 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) 18:54:53 executing program 4: syz_clone(0x440403c6, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:53 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb26b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8265}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x55}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x20004001) 18:54:53 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r3, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x12}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1db}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffb4d}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x44010) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x13f, 0x8}}, 0x20) 18:54:53 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair(0x1f, 0x800, 0x7ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$rose(r2, &(0x7f0000001200)="dbbd38ca2655ca311580ed533a46763b0ea83eb60bcfab293b934e49f4aed7f54db755cfa9e53d65b51ec3e794b05b32bbcebbea065073c6f1e67dc5c113113759cc220e118db59b57942dd5241a97", 0x4f, 0x2000000, &(0x7f0000001140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40) syz_io_uring_setup(0xfe8, &(0x7f0000000300)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)=0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000010c0), 0x3, 0x2) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000001100)={0x1, {0xffffffff, 0x8, 0x6, 0x3}, {0x1ff, 0x7, 0x2, 0x2}, {0x7, 0xfffffff9}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@cb_func]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_io_uring_complete(r3) syz_io_uring_setup(0x4cd6, &(0x7f0000000480)={0x0, 0xd3a3, 0x10, 0x0, 0x312}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000500), &(0x7f0000000540)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000600)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r2, 0x80, &(0x7f0000000580)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x1000) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @link_local, 'dummy0\x00'}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)="38ad4534b805d6f9cad100ad5a7f5168d8202ffc931687452c49919d3bab85ca21f5a208647b085b6f04a26b1a6167b1cd20dc162869462f60ce7915811394d5685115cab6239a9f6c0745ae965999f7ff411b7f9c0ff8c50dd440779481b5a4e82ad5b7a2b00ac1aba821086ba10026f6570bcf0d53565533e165f1c8a54224e04f3e0dcd96ad91351695d0abde0586aa344837bef2e952e2b998938cd6aebd4b0bd35fe48a22fb600a2e3d9f13a91127d5d16a32c0b7", 0xb7}, {&(0x7f0000000200)="9d85cdff34b5dde75740719ac64b58b515e181995b5178fb82ad3bfe55549a92bed6ede4ee7611e1f3490fdd63984ff96e849f354eea59989de26624898cfecdf14e8e23f0b53edc6fa09c304f95395e3a049a863754e5d9031671e17a2339b72d92b529069bd850a01437e0c2ab64e67d51804de08cf834a585a43095b5d896e6510da46e20f7285b8bbabbb48f8a9cda5c11b4ac2139b93244786a569c7bbbdfd2b95a0d3045e1407235ac2f600eb5d06eca51f4ad896b8b0284bb55", 0xbd}, {&(0x7f00000002c0)="5adab0b59b8850a0", 0x8}], 0x3, &(0x7f0000000340)=[{0x30, 0x110, 0x401, "e9637bb01569d7f884646796fcb51ce5c2bfa84e577041a94fa187d10bd22e"}, {0xb8, 0x6, 0x3, "8ce742b376e27358930d7042ea00ce0d5127983791cd2aa487739a61f25cc9d35a35600e2de3b602def980012bf4aa89aab378d41eb02bb3ba6e7488c16b24ad0eb04bf3c630b040c74f24e652c09321ea9145502d93cad085f95fe803f86389fd1e657f97b854526db7592ea225b99d81a6183bcbe36fd5db9b9919a4cdc1a62b708ad93f7ae4fb77c965c9931a68ece685da63e43b99974fcdca166d37c8e72db0f97d"}], 0xe8}, 0x4040004) socket$packet(0x11, 0x3, 0x300) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001380)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001780)={&(0x7f00000013c0)={0x39c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9d87}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x8c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040044) ioctl$FBIOPUT_CON2FBMAP(r7, 0x4610, &(0x7f0000001280)={0x1c, 0x1}) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) socketpair(0x1f, 0x800, 0x7ff, &(0x7f0000000000)) (async) sendto$rose(r2, &(0x7f0000001200)="dbbd38ca2655ca311580ed533a46763b0ea83eb60bcfab293b934e49f4aed7f54db755cfa9e53d65b51ec3e794b05b32bbcebbea065073c6f1e67dc5c113113759cc220e118db59b57942dd5241a97", 0x4f, 0x2000000, &(0x7f0000001140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40) (async) syz_io_uring_setup(0xfe8, &(0x7f0000000300)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380), 0x0) (async) syz_open_dev$vbi(&(0x7f00000010c0), 0x3, 0x2) (async) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000001100)={0x1, {0xffffffff, 0x8, 0x6, 0x3}, {0x1ff, 0x7, 0x2, 0x2}, {0x7, 0xfffffff9}}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@cb_func]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) syz_io_uring_complete(r3) (async) syz_io_uring_setup(0x4cd6, &(0x7f0000000480)={0x0, 0xd3a3, 0x10, 0x0, 0x312}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000500), &(0x7f0000000540)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(r3, r5, &(0x7f0000000600)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r2, 0x80, &(0x7f0000000580)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x1000) (async) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @link_local, 'dummy0\x00'}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)="38ad4534b805d6f9cad100ad5a7f5168d8202ffc931687452c49919d3bab85ca21f5a208647b085b6f04a26b1a6167b1cd20dc162869462f60ce7915811394d5685115cab6239a9f6c0745ae965999f7ff411b7f9c0ff8c50dd440779481b5a4e82ad5b7a2b00ac1aba821086ba10026f6570bcf0d53565533e165f1c8a54224e04f3e0dcd96ad91351695d0abde0586aa344837bef2e952e2b998938cd6aebd4b0bd35fe48a22fb600a2e3d9f13a91127d5d16a32c0b7", 0xb7}, {&(0x7f0000000200)="9d85cdff34b5dde75740719ac64b58b515e181995b5178fb82ad3bfe55549a92bed6ede4ee7611e1f3490fdd63984ff96e849f354eea59989de26624898cfecdf14e8e23f0b53edc6fa09c304f95395e3a049a863754e5d9031671e17a2339b72d92b529069bd850a01437e0c2ab64e67d51804de08cf834a585a43095b5d896e6510da46e20f7285b8bbabbb48f8a9cda5c11b4ac2139b93244786a569c7bbbdfd2b95a0d3045e1407235ac2f600eb5d06eca51f4ad896b8b0284bb55", 0xbd}, {&(0x7f00000002c0)="5adab0b59b8850a0", 0x8}], 0x3, &(0x7f0000000340)=[{0x30, 0x110, 0x401, "e9637bb01569d7f884646796fcb51ce5c2bfa84e577041a94fa187d10bd22e"}, {0xb8, 0x6, 0x3, "8ce742b376e27358930d7042ea00ce0d5127983791cd2aa487739a61f25cc9d35a35600e2de3b602def980012bf4aa89aab378d41eb02bb3ba6e7488c16b24ad0eb04bf3c630b040c74f24e652c09321ea9145502d93cad085f95fe803f86389fd1e657f97b854526db7592ea225b99d81a6183bcbe36fd5db9b9919a4cdc1a62b708ad93f7ae4fb77c965c9931a68ece685da63e43b99974fcdca166d37c8e72db0f97d"}], 0xe8}, 0x4040004) (async) socket$packet(0x11, 0x3, 0x300) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001380)) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001780)={&(0x7f00000013c0)={0x39c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9d87}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x8c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040044) (async) ioctl$FBIOPUT_CON2FBMAP(r7, 0x4610, &(0x7f0000001280)={0x1c, 0x1}) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) (async) 18:54:53 executing program 0: syz_clone(0x440403c4, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:53 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0xd, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x65}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x44005) 18:54:53 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) socketpair(0x1f, 0x800, 0x7ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$rose(r2, &(0x7f0000001200)="dbbd38ca2655ca311580ed533a46763b0ea83eb60bcfab293b934e49f4aed7f54db755cfa9e53d65b51ec3e794b05b32bbcebbea065073c6f1e67dc5c113113759cc220e118db59b57942dd5241a97", 0x4f, 0x2000000, &(0x7f0000001140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40) syz_io_uring_setup(0xfe8, &(0x7f0000000300)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)=0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000010c0), 0x3, 0x2) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000001100)={0x1, {0xffffffff, 0x8, 0x6, 0x3}, {0x1ff, 0x7, 0x2, 0x2}, {0x7, 0xfffffff9}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@cb_func]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_io_uring_complete(r3) syz_io_uring_setup(0x4cd6, &(0x7f0000000480)={0x0, 0xd3a3, 0x10, 0x0, 0x312}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000500), &(0x7f0000000540)=0x0) (async) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000600)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r2, 0x80, &(0x7f0000000580)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x1000) (async) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @link_local, 'dummy0\x00'}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)="38ad4534b805d6f9cad100ad5a7f5168d8202ffc931687452c49919d3bab85ca21f5a208647b085b6f04a26b1a6167b1cd20dc162869462f60ce7915811394d5685115cab6239a9f6c0745ae965999f7ff411b7f9c0ff8c50dd440779481b5a4e82ad5b7a2b00ac1aba821086ba10026f6570bcf0d53565533e165f1c8a54224e04f3e0dcd96ad91351695d0abde0586aa344837bef2e952e2b998938cd6aebd4b0bd35fe48a22fb600a2e3d9f13a91127d5d16a32c0b7", 0xb7}, {&(0x7f0000000200)="9d85cdff34b5dde75740719ac64b58b515e181995b5178fb82ad3bfe55549a92bed6ede4ee7611e1f3490fdd63984ff96e849f354eea59989de26624898cfecdf14e8e23f0b53edc6fa09c304f95395e3a049a863754e5d9031671e17a2339b72d92b529069bd850a01437e0c2ab64e67d51804de08cf834a585a43095b5d896e6510da46e20f7285b8bbabbb48f8a9cda5c11b4ac2139b93244786a569c7bbbdfd2b95a0d3045e1407235ac2f600eb5d06eca51f4ad896b8b0284bb55", 0xbd}, {&(0x7f00000002c0)="5adab0b59b8850a0", 0x8}], 0x3, &(0x7f0000000340)=[{0x30, 0x110, 0x401, "e9637bb01569d7f884646796fcb51ce5c2bfa84e577041a94fa187d10bd22e"}, {0xb8, 0x6, 0x3, "8ce742b376e27358930d7042ea00ce0d5127983791cd2aa487739a61f25cc9d35a35600e2de3b602def980012bf4aa89aab378d41eb02bb3ba6e7488c16b24ad0eb04bf3c630b040c74f24e652c09321ea9145502d93cad085f95fe803f86389fd1e657f97b854526db7592ea225b99d81a6183bcbe36fd5db9b9919a4cdc1a62b708ad93f7ae4fb77c965c9931a68ece685da63e43b99974fcdca166d37c8e72db0f97d"}], 0xe8}, 0x4040004) (async) socket$packet(0x11, 0x3, 0x300) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001380)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001780)={&(0x7f00000013c0)={0x39c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9d87}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x8c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040044) ioctl$FBIOPUT_CON2FBMAP(r7, 0x4610, &(0x7f0000001280)={0x1c, 0x1}) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:53 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0xd, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x65}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x44005) 18:54:53 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0xd, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x65}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x44005) 18:54:53 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="f4359546cc8cf1d8", @ANYRES16=0x0, @ANYBLOB="000226bd7000fddbdf25510000000a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a000600080211000000000005008a0000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x48010) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)={r2}) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:53 executing program 3: syz_clone(0x44040304, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:53 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000001000000000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990009000000130000000a000600080211000000000008003700010000000c006e8004000200040002000800090005ac0f00"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000b89752b99778d326250653f219f335c040d513db2a0bc9d3e1d8838fe0001239744622e7cf985bb26febb112f6c2ece1a5bc718a98875196584a2d6adb257eb7babd2d9cd12e92ef7c34a754bdb9869bc81fe4987fc076c415c83102a82feedbf83c5c09c4afa4921daeb957eaf12f4e3e2c63017be6056b7dd13e47017fe091b754d03e01d7004dc7e19a6bd2cf73b2fe9348c47e55da763225e450dbdeb077785b738827236a6a3f1ac071a250f7481752c9c74eb6c17dd5a024ff9a", @ANYRES16=r6, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x6) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r6, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x84) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000380)={r7}) 18:54:53 executing program 4: syz_clone(0x440403c9, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:53 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="f4359546cc8cf1d8", @ANYRES16=0x0, @ANYBLOB="000226bd7000fddbdf25510000000a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a000600080211000000000005008a0000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x48010) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)={r2}) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:53 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4) (async) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) 18:54:53 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000001000000000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990009000000130000000a000600080211000000000008003700010000000c006e8004000200040002000800090005ac0f00"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000b89752b99778d326250653f219f335c040d513db2a0bc9d3e1d8838fe0001239744622e7cf985bb26febb112f6c2ece1a5bc718a98875196584a2d6adb257eb7babd2d9cd12e92ef7c34a754bdb9869bc81fe4987fc076c415c83102a82feedbf83c5c09c4afa4921daeb957eaf12f4e3e2c63017be6056b7dd13e47017fe091b754d03e01d7004dc7e19a6bd2cf73b2fe9348c47e55da763225e450dbdeb077785b738827236a6a3f1ac071a250f7481752c9c74eb6c17dd5a024ff9a", @ANYRES16=r6, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x6) (async) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r6, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x84) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000380)={r7}) 18:54:54 executing program 0: syz_clone(0x440403c4, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:54 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="f4359546cc8cf1d8", @ANYRES16=0x0, @ANYBLOB="000226bd7000fddbdf25510000000a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a000600080211000000000005008a0000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x48010) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)={r2}) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="f4359546cc8cf1d8", @ANYRES16=0x0, @ANYBLOB="000226bd7000fddbdf25510000000a00060008021100000100000a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a000600080211000000000005008a0000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x48010) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)={r2}) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) (async) 18:54:54 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000001000000000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990009000000130000000a000600080211000000000008003700010000000c006e8004000200040002000800090005ac0f00"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000b89752b99778d326250653f219f335c040d513db2a0bc9d3e1d8838fe0001239744622e7cf985bb26febb112f6c2ece1a5bc718a98875196584a2d6adb257eb7babd2d9cd12e92ef7c34a754bdb9869bc81fe4987fc076c415c83102a82feedbf83c5c09c4afa4921daeb957eaf12f4e3e2c63017be6056b7dd13e47017fe091b754d03e01d7004dc7e19a6bd2cf73b2fe9348c47e55da763225e450dbdeb077785b738827236a6a3f1ac071a250f7481752c9c74eb6c17dd5a024ff9a", @ANYRES16=r6, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x6) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r6, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x84) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000380)={r7}) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000001000000000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990009000000130000000a000600080211000000000008003700010000000c006e8004000200040002000800090005ac0f00"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000b89752b99778d326250653f219f335c040d513db2a0bc9d3e1d8838fe0001239744622e7cf985bb26febb112f6c2ece1a5bc718a98875196584a2d6adb257eb7babd2d9cd12e92ef7c34a754bdb9869bc81fe4987fc076c415c83102a82feedbf83c5c09c4afa4921daeb957eaf12f4e3e2c63017be6056b7dd13e47017fe091b754d03e01d7004dc7e19a6bd2cf73b2fe9348c47e55da763225e450dbdeb077785b738827236a6a3f1ac071a250f7481752c9c74eb6c17dd5a024ff9a", @ANYRES16=r6, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x6) (async) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r6, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x84) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000380)={r7}) (async) 18:54:54 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4) (async) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) 18:54:54 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) setsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000000)=0xffff, 0x4) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:54 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0xa0041, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x170, 0x0, 0x3ce62cbe9afb3c3a, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x575}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xe12}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff7b24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x16}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1b}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2b3}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x170}, 0x1, 0x0, 0x0, 0x4}, 0x0) 18:54:54 executing program 3: syz_clone(0x4404030e, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:54 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)) 18:54:54 executing program 4: syz_clone(0x440403d0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:54 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0xa0041, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x170, 0x0, 0x3ce62cbe9afb3c3a, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x575}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xe12}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff7b24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x16}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1b}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2b3}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x170}, 0x1, 0x0, 0x0, 0x4}, 0x0) 18:54:54 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) (async) setsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000000)=0xffff, 0x4) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:54 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)) 18:54:54 executing program 0: syz_clone(0x440403c4, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:54 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0xa0041, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x170, 0x0, 0x3ce62cbe9afb3c3a, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x575}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xe12}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff7b24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x16}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1b}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2b3}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x170}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0xa0041, 0x0) (async) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x170, 0x0, 0x3ce62cbe9afb3c3a, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x575}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xe12}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff7b24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x16}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1b}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2b3}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x170}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) 18:54:54 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) setsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000000)=0xffff, 0x4) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) (async) setsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000000)=0xffff, 0x4) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) (async) 18:54:54 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)) (async) 18:54:54 executing program 5: socketpair(0x26, 0x4, 0x6, &(0x7f0000000040)) 18:54:54 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x14c, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x4}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0x2c}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x4}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x3b}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x52e}]}, 0x14c}, 0x1, 0x0, 0x0, 0xc080}, 0x1000404c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:54 executing program 3: syz_clone(0x4404031a, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:54 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000000), 0x4) 18:54:54 executing program 4: syz_clone(0x440403f4, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:54 executing program 5: socketpair(0x26, 0x4, 0x6, &(0x7f0000000040)) 18:54:54 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000000), 0x4) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000000), 0x4) (async) 18:54:54 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x14c, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x4}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0x2c}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x4}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x3b}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x52e}]}, 0x14c}, 0x1, 0x0, 0x0, 0xc080}, 0x1000404c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:55 executing program 0: syz_clone(0x440403c9, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:55 executing program 5: socketpair(0x26, 0x4, 0x6, &(0x7f0000000040)) socketpair(0x26, 0x4, 0x6, &(0x7f0000000040)) (async) 18:54:55 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000000), 0x4) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000000), 0x4) (async) 18:54:55 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x14c, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x4}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0x2c}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x4}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x3b}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x52e}]}, 0x14c}, 0x1, 0x0, 0x0, 0xc080}, 0x1000404c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:55 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r2, 0x79f, &(0x7f0000000200)=0x80000) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f00000003c0)=0x40b2) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x106, 0x1}}, 0x20) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='fm\x00\x00\x00\x00', @ANYRESHEX=r4, @ANYRES16=r3], 0x288}, 0x1, 0x0, 0x0, 0x4008cc0}, 0x60040004) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) 18:54:55 executing program 5: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x1}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x48040) socketpair(0x2, 0x2, 0x7990, &(0x7f0000000040)) 18:54:55 executing program 3: syz_clone(0x4404032e, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:55 executing program 4: syz_clone(0x440403f8, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:55 executing program 5: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x1}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x48040) socketpair(0x2, 0x2, 0x7990, &(0x7f0000000040)) 18:54:55 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r2, 0x79f, &(0x7f0000000200)=0x80000) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f00000003c0)=0x40b2) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) (async) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x106, 0x1}}, 0x20) (async) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='fm\x00\x00\x00\x00', @ANYRESHEX=r4, @ANYRES16=r3], 0x288}, 0x1, 0x0, 0x0, 0x4008cc0}, 0x60040004) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) 18:54:55 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @default}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:55 executing program 5: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x1}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x48040) socketpair(0x2, 0x2, 0x7990, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x1}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x48040) (async) socketpair(0x2, 0x2, 0x7990, &(0x7f0000000040)) (async) 18:54:55 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @default}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:55 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION(r2, 0x79f, &(0x7f0000000200)=0x80000) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f00000003c0)=0x40b2) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x106, 0x1}}, 0x20) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='fm\x00\x00\x00\x00', @ANYRESHEX=r4, @ANYRES16=r3], 0x288}, 0x1, 0x0, 0x0, 0x4008cc0}, 0x60040004) (async) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) 18:54:55 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 64) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @default}, 0x1c) (rerun: 64) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001340)={&(0x7f0000000080)={0x12a8, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6fa3, 0x3a}}}}, [@NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9e}, @NL80211_ATTR_FRAME_MATCH={0xb4, 0x5b, "4cb44b26b9ed679d9c71e157ecae671f7a841c672075c7bc7640a769e53b2f01565fd2121a3397a9f1358dd965c7163e70389a6e73a825c9923748093750ae1a4593daf362307c6ceb5d6af637758221663cce8816c48533e03a42fceb302566ad22ae4bd39952f25f6ff796294d3903006da74fbf063e74036783b8d396d29b2f88edf3cb084f37efe462c739224dfdc3ec870f27133651383a30563662188279c0557e50d00d11d197734eda793b95"}, @NL80211_ATTR_FRAME_MATCH={0x20, 0x5b, "860ab02d2a63da78b83cf3baa4a5073ef65c8547b18dc1054405adab"}, @NL80211_ATTR_FRAME_MATCH={0xb4, 0x5b, "c6906ece5933d31013a0cffd60309fa62e71da1658e992b80007396927ff71fa904584cd91909e8bea2e11548b0ae184fa059c563eb9d77df9d476e721b7653a297963a2cd334226c4b486d42d3ddf950d557cfbc5725d61eef440f0ae1475eaabb71d549e09ac6b94a0f3c6c8803a04f76082c4065a1441f338907034a42dededa29b2569f148bebe8b26c4e2ecd280092bfc1a6e8974bc9e33819e96a7155534c65a993cd86a30386a31d347ed1d86"}, @NL80211_ATTR_FRAME_MATCH={0xda, 0x5b, "5fab14b7130122a407bea40cfec66537cd3d848658c1ee53280d0ae89645a05001c04f5ab2d9fcd4b7a4cd15d79da586032b1dd9ab676b796b4a2b9cfb062eff89589134cb38e1b6c0186ff6fc91aa4b3a4c9da438607de855f04a2e11881f58aa539c535b8248603a26fa3b2ae1ac9fb6ba7f682b3b7fc88152b7c94dcca91e682ab6d329aa16f9bc05dac74dada10129637ef4e42d90c7ce2c2ce0ff2d395d398cb7b8333e99ed445c171451eab2835852e2581b796f666b311f2e3fb5dac58ba1f0e82d90777f62a379c87285d5230b60f53f5e4a"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x28a}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x4040}, 0x400c000) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x4) 18:54:55 executing program 5: epoll_create(0x1) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r0}) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000240)=0x5) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) accept4$rose(r2, &(0x7f0000000040)=@full={0xb, @dev, @rose, 0x0, [@default, @netrom, @default, @null, @rose, @bcast]}, &(0x7f00000002c0)=0x40, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x2, 0x16, 0x9, 0x5, 0x33, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010102, @in=@remote, 0x0, 0x4, 0x14}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d2}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d5}, @sadb_x_sec_ctx={0x17, 0x18, 0xc1, 0x3, 0xb0, "b0cf8338624205c8a9ef9efbb9939129b52c9994e2413878de8d965f6f023729ae879ddefaf5aba38d29829864e4b744afff4c0d7e7311efaaf2686ca740430d4772552ff653e60b89c9f242b6024072d113a72eec4734ea16ebdc61f77719620a204fbc51857ac7b173d1048d4aaa08d0d9b2d4407b9e3dac382c6239a7a92bcb7dfdda2a7db94590f90888b945c7279bc95fa29b3f11d07ddd3fffe1dadcfaa5b0a4829362f4cbcb8942f1d07d8b89"}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x8, 0x34ff}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e23, 0x101, @private1, 0x3}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x4, 0x0, 0x6e6bbb, 0x2, {0x6, 0x32, 0x2, 0x82, 0x0, 0x9, 0x0, @in=@broadcast, @in=@remote}}]}, 0x198}}, 0x20000000) syz_io_uring_setup(0x76f9, &(0x7f0000000300)={0x0, 0xc0c0, 0x1, 0x1, 0x15c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fec000/0x11000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) ioctl$SIOCRSGL2CALL(r4, 0x89e5, &(0x7f0000000500)=@default) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x9, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8000}, @alu={0x7, 0x0, 0x9, 0xa, 0x8, 0x10}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @exit, @exit, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000280)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x6, 0x81, 0xbc6}, 0x10}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r6, r7, 0x25, 0x18}, 0x10) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r5) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x6, 0x1, &(0x7f0000000400)="2877caa6b8fde4adcbc2732b553982b5314dd72b06173f9ad61af93ab339ba2129740ebb4d33b80e99bf61fe9b7dc79f2fc054e21aaa989b3a4898cb46027e7e04ca0387b5bb95f35c374b455a159e8893ae6139d89940055cea01a58b725edfb91f88b368453124e957dfe9c2df087d82190e06c3ef1499747ab0c46ee400486df327de7f5cfaa0fd2ac86f22e6cf706309039f901ac2ba", 0x9, 0x0, 0x0, {0x2, r5}}, 0x70) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x2, 0x48b4, 0x0, 0x9, 0x6}, 0xffff6b2e) 18:54:55 executing program 0: syz_clone(0x4404031a, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:55 executing program 3: syz_clone(0x44040349, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:55 executing program 4: syz_clone(0x440403fa, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:55 executing program 5: epoll_create(0x1) (async) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r0}) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000240)=0x5) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (async) accept4$rose(r2, &(0x7f0000000040)=@full={0xb, @dev, @rose, 0x0, [@default, @netrom, @default, @null, @rose, @bcast]}, &(0x7f00000002c0)=0x40, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x2, 0x16, 0x9, 0x5, 0x33, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010102, @in=@remote, 0x0, 0x4, 0x14}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d2}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d5}, @sadb_x_sec_ctx={0x17, 0x18, 0xc1, 0x3, 0xb0, "b0cf8338624205c8a9ef9efbb9939129b52c9994e2413878de8d965f6f023729ae879ddefaf5aba38d29829864e4b744afff4c0d7e7311efaaf2686ca740430d4772552ff653e60b89c9f242b6024072d113a72eec4734ea16ebdc61f77719620a204fbc51857ac7b173d1048d4aaa08d0d9b2d4407b9e3dac382c6239a7a92bcb7dfdda2a7db94590f90888b945c7279bc95fa29b3f11d07ddd3fffe1dadcfaa5b0a4829362f4cbcb8942f1d07d8b89"}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x8, 0x34ff}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e23, 0x101, @private1, 0x3}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x4, 0x0, 0x6e6bbb, 0x2, {0x6, 0x32, 0x2, 0x82, 0x0, 0x9, 0x0, @in=@broadcast, @in=@remote}}]}, 0x198}}, 0x20000000) (async) syz_io_uring_setup(0x76f9, &(0x7f0000000300)={0x0, 0xc0c0, 0x1, 0x1, 0x15c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fec000/0x11000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) (async) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) (async) ioctl$SIOCRSGL2CALL(r4, 0x89e5, &(0x7f0000000500)=@default) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x9, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8000}, @alu={0x7, 0x0, 0x9, 0xa, 0x8, 0x10}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @exit, @exit, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000280)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x6, 0x81, 0xbc6}, 0x10}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r6, r7, 0x25, 0x18}, 0x10) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r5) (async) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x6, 0x1, &(0x7f0000000400)="2877caa6b8fde4adcbc2732b553982b5314dd72b06173f9ad61af93ab339ba2129740ebb4d33b80e99bf61fe9b7dc79f2fc054e21aaa989b3a4898cb46027e7e04ca0387b5bb95f35c374b455a159e8893ae6139d89940055cea01a58b725edfb91f88b368453124e957dfe9c2df087d82190e06c3ef1499747ab0c46ee400486df327de7f5cfaa0fd2ac86f22e6cf706309039f901ac2ba", 0x9, 0x0, 0x0, {0x2, r5}}, 0x70) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x2, 0x48b4, 0x0, 0x9, 0x6}, 0xffff6b2e) 18:54:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001340)={&(0x7f0000000080)={0x12a8, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6fa3, 0x3a}}}}, [@NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "bb3b671fd34f4e3595613334e8469f5c6ab63142cac7a2a48f230e4d6484ddc9e0c2175504f8f12fcf03ebfe7487f28f49ec11a69e2cd3a6306327a5fe684d5f2aa13e0776b563961379276871fab4a8ff32600438d0ac06770a823f50a5a773b9c04d9c578dd7f45b9b0ef3581856e1145dd4ba82f7f86981af40348bb178ae895c0e4baf2a272f64bfc02947facea125915dacf284bd8a014ac355c0069f17d64b3e8c9d3dccce5286e14ac3f8e84a06764b808e3d82784e18cc767f02a994cdbacb75dbc5191db5113647f00967c79f6915521659e84e8fc9832642fbe53f888bac11b6a99f0930563ade62348169dd1b8ed162da5897699ced64fa7837f07f996f83d9e97a34703d6ae0b616bda037c77971381d46c4ff2569e69ff8a2d0004dc95b423f228eaa221a2928c4b9cbc5d9c45fb6c82e10165c118dc90cf2620b8aba9b43a8a0d8b4b4798d801da97b82bdc51a16bd4193e6c664a1c1a92c10dea21e3ccb26331f526950232f8a14bc3e36c3ac1743662304bb6ac2fc40a8650fb77fe02df7b152cdcc0a746ebf8710adc9babf9bd8630d60ff05915475c882157632a00d2b5f907b2d81f318e75abac382e6e9a26208d40a3f488434db23ffec8dbcb43c135951b06aca88b0929cdf1086b2a13f7c531497c6de8b7b08b39f94b7eddda7f939fc8bf8df9ad417fa7f111c3bb150df98c7b0cbfba69088348305affbd7c26b5ae4dc9e04825fc9fd8780805067dee342481c9f8fb7031e4d2869eca5c34e247a89147f985dc4cb4a120dada2d15827bf8b8262dba8492940a8b24b9d02f31ada4d29a97267bd09d83031a6e5336b652e28481cca594f0d4465b6eadd986a65f3d7f519fa4de7600697c710e5e8036dcac34360b7b5a80c54f57e558cc8a409723527f0badf4aefcff152205e1d0c019ee2b6f47108ddbc1fb1b2ecd13074fe6f77868867778c091dc8b4757a6a71ba31d69bfd6cd198bf5a147a111e3d76795763701932a09c8bbd375cc1473fab357ddb01f09f553a2940263c1ed262cb67acb8d357f026864aaad830f264df6265843b464e4ea0a1732ed1ca50a8d8ee1daeea4e9116be9f79d33af9512f891544e3a8fca8148484095dcb414cf52b2cf701f85952e77fc16be5ed927e3ebc1c36730a5297a5da58aa0bd29ebabe587af831f0e2bd413eddcb931ec4401d00dd4bb243e9170e6cdff4f958c9a029bf1de59a9e65b3fd816f0cad7b2c2f5b15b6b029f2fc5eff9945893106e4916c272826fc74e55d8adf7961d71ace43b44391d31a8991387e83ec3d52db7c0dbca1c6acda52963081f2268637a26f7806e7eeb692563dea292821b919fc6ad3b14590a4da843fec209b5cad7c994b3ebd3580dd9d5c1fdbdc2fe145f1ccefdca174365d884aa80c650d15c13aedeff6dd6d3a2f740cb7d9e9459b4eccbf4e6293720bc1f60068c8416688fb2df253b1394b3bf6f1b82996164a9ac278bfc7b6056c9d6e969413c631c51621e96d51f3ee35a8800c98bf38dd6288740a7aa5805ce6b65532fe0232327af253291deed96b0f3813c0e1bbdd63d2c6124f98cebf18df6b372f8fe1ed996e36dd7c7ad81a0808a35f2eb63df56b00a0bd341668d2f2aa3a303a3d7195bcc4658f9c3fb48662c54fe8b27ed7c106d309ba098a656c46a85d6b20433204a03b8dc56d838162412707f4d5226f6189d0ff6aeced8c4c10704ce18e876f373710892750e10c50bcb5b35a681de5f6a1c8a8b0a2fbefd707623ef213c44ddaba261eb13643ec4df9ad76d5403f3f1a1442c93573eddac027526baaa7fb941e51754eb9168135c9cd042d3d9891fed599da25e310a80371efb0c5935a62d15c37b3d657fad5800ff5b1a21a4a9885b21c6bef5647258b2456b99c5438e0f0af5e64ad324d3b6d0960bf4b3a91794c51d2d3ed2124f46d97b2592ce6fd0f73d29c024b9a4d49e9fd482d234fe02c38f6721d7793a8bdc7ce463500a558870924752c6c85abc695a68e0fe1ad3a8cd5176f146e70623af972deddbd80d8943b18ffe49f9cd9cdcb826c23f410af095a41707f30871d3724ab215e0ca1933bd56ce3f9ddade6181de862c62175d38be66fd17d9aba2e34727978e4dcafcf4e7b6fd61a2a80ca713ea41a9835597ca5fdcb5da663708db351a9efc05a5028d76fc10c3bc901d7e265e0a71509fd00e5e5be46732f67b58154e70e5ea907c1d87d1f70f687a27c5be7c0a76f8d62f07a3dad8b18f8c724eab121842c0e2a65f2a4eabf322d2944371c699190e91161efbadaf4f9b279f29c9e007b6b80413bf9418eb75acf1b1377a6a6e3ee501e9f27a5891d37c5c35915ffef6ae59cbae4f3f269bc893f6001fab1b503efb50c3d17c0e787fda077005047f28c446514ac3dbe07916268988e5114658217f07e6294729feac6f6ee35a78de462d75b239f91f7f4afa65dac02f5512cb3c5be3a58d130406d83b611c44eeb10929df75cb34521a234370d36fae2bbd53ec7cc8f2ea60f8243dfd5340a30dd854c7804569cafa99d07eb6bd1f40e1592d0f6b430729738f8920ca6b5ef642f7551f3f69885701d1dcecf9b7f49c2d1119dc1b81125a6cf1ee819a62a9d6b32ee23e662a0273e54f7d4aaca2f0a1137abcffa014e69a40cb92d8967a0161ef744bcfd3b910cf60d0c5042b3c9fb28656b04a9a819d239cedb68dd3ddfc416e99557a881ab807084dd3cf38fc098da24f5a00c00e65269a60fd5abe087868d1e076f9f43eeed2ec61e4b3430eeb26d59a7b1d77ff68df88e91db7f838c8cfbe9c7beaffded8dd5660fa2356044371fa5d51185273c50d8876a12263a0669c9c39762b46a16c262f6a66cd90861d859f5791f744a32e8885c91b7a2a86f71f4559ab2fb48a4236abe0f67e27bae02d5b349a94089b360f7f01a1d3773890818ba37f0dd98486c48041bf16fb98cce0c4c923c7369ca236bdfef9a698acab3bb3b49f57a71885fa115a5391299719bdc0f4d87583fde45240ab29e371b57e25bba266b2a4a2926d96618f4f78a3f837cff9f59c5fb3b76f1b4547f7faa684a501074c9aeb069f150583fd1f07fba3aacd79005e40b7226be1e10f635bab3ab4afca821af3766d9f653654102d524bea3f7b09858b0a5dda808ba18feae228a506ed5123219baf0cf8645ebaa9b960433a2ccb50fcd9c15335e834668f9ba59370f0fbbae400b30434144f351873c001b7ec68618c0a82d82497da30d5009b21f4b81be8488f76fa790eef31f3b36c18659d7b1a27aaa389609a9d55ed1b1568fb915210464294457ec9fc17ae3757e59456efcae18f0199d89729ea8817edbb91cdf2f34cf1c10440e1426a79f85ac6f907910c1099f2e6f2459840f47a3a278615cc68bafdc8eefc2119e0a090f66f8ee8a1d205abcc15ed1f8259bad79a3b3f25193505d80ab940f83241afef32b1b61ad3682bfd610c06f4058781b1d266d9bfb76688532b07bb6f2bac065c5c4e3f5cba323fea00be5b081efa9a2ec43b5e7b3add3e9bd9bebb458fdcbc7aa4bf0bc737eba4becf4bfabef2329895fadedc8f97537bb4e0d99109b77d62992947d2caf1bbb959274d65216f0d3d80dc91f22ee66ca06aed6f4a195b2d3fc03770bc6fc593e7b16effe386b6e76acc832aa4e1786af90077f9fa6acde36a209d0fb64cb9b4841b501ccc2fec5fb804d3f42f1a82266c4da520f43f64ca70a5ad7d0333c537a66b8a56dd5c6b6cf1711790209437558662d09ed7e8b3bffbe497955c20a9d503f0fd37e09df4811931128202fde67b568c605c67ac367df287c86f0452fc5fc1b81ec8b83aaecafe4b2af66645628a70a1f782665a953f2e9b6f936bb2254b547cb57ba2d542ad51748217e0961f6ed4c247a71fea57879e8266843544178a80e60af503f34d7a73411fa5b6485212f243d3d4cff7cdfa2e4c40c857ecdde80aae10c2ca906d13289d4dd90264e5f52226e89c83c9318c5f896b1c0cfba461770e456deafb99360f68653e5e1d92f72f96ce575442415090db1fbd4770427544ba63ade22ed14d8f0fb41df0b207adb5471f84311b5504d378168be0978c0e30ef25d9c8de6039db1bc792352f2c1dc71d660355bc9e6f205d898d2d9bbe5ef039fc4129654e90db114d8336be30f01798467c01dca5a2c87126a6e8f2b8d7fa681638e38196ce85d0335a3d0746395182bc6fb9faa528c34912140e075183146398f9c7fe9b89a958b2f5b9282ae0391d5ba19cccc5f33e57d400f09278151aa0e834b69234026f38cd95a94e792d629baf4bed3644fd59b5f2d5c099a08e10635fdac8d58f4fabf0a31a780f43563b25b5cc21f64c636f74eb7d25cc9715df32d54394a2b3dbbb23b4c99737d8e30d40ccf0b36ac855b0b4177105860947a5fed2b9165674e9f69bb9fc3ceec3ce2a259404a7a9ac33d6b84796d8f27dc0f6dc9474a5a0188295b01a08aac6f43c692e5e7fe3140ba00a028c8401fab303cf260d599a0c94092ba3883e6ea606a76f6833e6abf758b8c1782103dff062c50b67b5129bfe3c6db79c6545c16b192525af991a78484c1764234d469df23eeca4ebe989cc15679699dad932b8355ce7f5f4f260e28bbe977e30fe1f2662fd2ee126553c4f914def2450d9d6fee70dce917b0d4fd0fd10368a27a7c1e895ae4ae5715457868bf1334884ac692b3314212007e5b6356e04adeb1b940edc9d4aa7d2f0a158a174a39dd7e19cdc13352b7be816e9e52dfc2a525e11a7fa1dbec259c90835c0f3f0e54b96c059cdc95798fb9b79c3a2a0d440a336475411d91ac6ce6c4af86ea504bcc4c1248159fbcee7afe7ef79283de73c781c00cc17045f387b3aae9c396b8c4a1b186f40eaa1a4e1e2aa8d8d619beb6d34e43b50cfaea11b4b61c31616157d34d7b8758621b5d79e180c1aebe62df1030fe5de2845dd5d695a144b7951f8e88227233bc58275ba0ff5fa0aef3f465a7487f4236806de66844d11e2362bd6212c99b8cbc434cd575314c727a25718f53416505b07b2d9b7bf0826b7b3e0d177bba606cd71d4d92eceffdda1d11e523bb4c47c5aa8aa607cb62884b901bdb4d0e7ae06ae115d36f78d83b52ea23e157767e1f5abe29d6e8b4a362cc05ba08761fe899b2ba7414886ec24e57854230738fe4ef189a61a6769d5a96eeb548c783023fca3d961dc211c7101f412172a54e1782c39bca1b71692d4c6d2bd231dcaf1b2e79bc0da635edd3235cc07af4fa433d1facf3fe04660aaec97d17d4693b810c563d09e278dae626f4570f5c7cdcfb1a11b90001c6f14239894f4a09f9186467398cfffe6c31cd189d27862cb6c6604888c29bfbfd78d28cdcf2c0754793bea53a02b7c51c6ace50df3b545c8d2132ed9ee01d9cf9425202c6e8c7c4a3e454562fba2b590c92df2ecd4a7bfd22c392d8f2fd954041fc7181b73dbb73b9d23b9d25e9f559d50dfbd54ac2d8729e439637865eef4bd37b034167eba1a5ae1cf63569c32cf82e1747c59ebb12a103c9d979878a132ed9fe6e6d1c19649dfdabf086c36c3ade2c15d7b9b05b154a199ea7cde0f1847e83e797bc443f2a57ac8aef88f400dc688b4ec321eccedcca24109f544110933bae81211370b4e01d89340897f78cb290da9ae09a67811951ff76808b40bab24b000a87530cb9079546cd28c767240115a082e0bc380747dc8dd78b2be9fa98c16eb22455cc47104ac26f8b01fa0fb6a9a517c6f1b685ca978f064a91f37eb7c4c0077c8207fb6db6bde5f5806926397fb757"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9e}, @NL80211_ATTR_FRAME_MATCH={0xb4, 0x5b, "4cb44b26b9ed679d9c71e157ecae671f7a841c672075c7bc7640a769e53b2f01565fd2121a3397a9f1358dd965c7163e70389a6e73a825c9923748093750ae1a4593daf362307c6ceb5d6af637758221663cce8816c48533e03a42fceb302566ad22ae4bd39952f25f6ff796294d3903006da74fbf063e74036783b8d396d29b2f88edf3cb084f37efe462c739224dfdc3ec870f27133651383a30563662188279c0557e50d00d11d197734eda793b95"}, @NL80211_ATTR_FRAME_MATCH={0x20, 0x5b, "860ab02d2a63da78b83cf3baa4a5073ef65c8547b18dc1054405adab"}, @NL80211_ATTR_FRAME_MATCH={0xb4, 0x5b, "c6906ece5933d31013a0cffd60309fa62e71da1658e992b80007396927ff71fa904584cd91909e8bea2e11548b0ae184fa059c563eb9d77df9d476e721b7653a297963a2cd334226c4b486d42d3ddf950d557cfbc5725d61eef440f0ae1475eaabb71d549e09ac6b94a0f3c6c8803a04f76082c4065a1441f338907034a42dededa29b2569f148bebe8b26c4e2ecd280092bfc1a6e8974bc9e33819e96a7155534c65a993cd86a30386a31d347ed1d86"}, @NL80211_ATTR_FRAME_MATCH={0xda, 0x5b, "5fab14b7130122a407bea40cfec66537cd3d848658c1ee53280d0ae89645a05001c04f5ab2d9fcd4b7a4cd15d79da586032b1dd9ab676b796b4a2b9cfb062eff89589134cb38e1b6c0186ff6fc91aa4b3a4c9da438607de855f04a2e11881f58aa539c535b8248603a26fa3b2ae1ac9fb6ba7f682b3b7fc88152b7c94dcca91e682ab6d329aa16f9bc05dac74dada10129637ef4e42d90c7ce2c2ce0ff2d395d398cb7b8333e99ed445c171451eab2835852e2581b796f666b311f2e3fb5dac58ba1f0e82d90777f62a379c87285d5230b60f53f5e4a"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x28a}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x4040}, 0x400c000) (async) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x4) 18:54:55 executing program 5: epoll_create(0x1) (async) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r0}) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000240)=0x5) (async, rerun: 32) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) (async) accept4$rose(r2, &(0x7f0000000040)=@full={0xb, @dev, @rose, 0x0, [@default, @netrom, @default, @null, @rose, @bcast]}, &(0x7f00000002c0)=0x40, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x2, 0x16, 0x9, 0x5, 0x33, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010102, @in=@remote, 0x0, 0x4, 0x14}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d2}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d5}, @sadb_x_sec_ctx={0x17, 0x18, 0xc1, 0x3, 0xb0, "b0cf8338624205c8a9ef9efbb9939129b52c9994e2413878de8d965f6f023729ae879ddefaf5aba38d29829864e4b744afff4c0d7e7311efaaf2686ca740430d4772552ff653e60b89c9f242b6024072d113a72eec4734ea16ebdc61f77719620a204fbc51857ac7b173d1048d4aaa08d0d9b2d4407b9e3dac382c6239a7a92bcb7dfdda2a7db94590f90888b945c7279bc95fa29b3f11d07ddd3fffe1dadcfaa5b0a4829362f4cbcb8942f1d07d8b89"}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x8, 0x34ff}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e23, 0x101, @private1, 0x3}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x4, 0x0, 0x6e6bbb, 0x2, {0x6, 0x32, 0x2, 0x82, 0x0, 0x9, 0x0, @in=@broadcast, @in=@remote}}]}, 0x198}}, 0x20000000) syz_io_uring_setup(0x76f9, &(0x7f0000000300)={0x0, 0xc0c0, 0x1, 0x1, 0x15c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fec000/0x11000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) (async) ioctl$SIOCRSGL2CALL(r4, 0x89e5, &(0x7f0000000500)=@default) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async, rerun: 64) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x9, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8000}, @alu={0x7, 0x0, 0x9, 0xa, 0x8, 0x10}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @exit, @exit, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000280)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x6, 0x81, 0xbc6}, 0x10}, 0x80) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r6, r7, 0x25, 0x18}, 0x10) (async, rerun: 64) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r5) (async, rerun: 64) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x6, 0x1, &(0x7f0000000400)="2877caa6b8fde4adcbc2732b553982b5314dd72b06173f9ad61af93ab339ba2129740ebb4d33b80e99bf61fe9b7dc79f2fc054e21aaa989b3a4898cb46027e7e04ca0387b5bb95f35c374b455a159e8893ae6139d89940055cea01a58b725edfb91f88b368453124e957dfe9c2df087d82190e06c3ef1499747ab0c46ee400486df327de7f5cfaa0fd2ac86f22e6cf706309039f901ac2ba", 0x9, 0x0, 0x0, {0x2, r5}}, 0x70) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x2, 0x48b4, 0x0, 0x9, 0x6}, 0xffff6b2e) 18:54:55 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @default}, 0x1c) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:56 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x80000001, 0x0, 0xffff, 0x80, 0xffffffffffffffff, 0x35, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x7}, 0x48) r2 = syz_io_uring_setup(0x385, &(0x7f0000000100)={0x0, 0x14b5}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r1, 0x5, 0x0, 0x9, 0x4, 0x1, {0x0, r3}}, 0x297f784b) bind$rose(r0, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001340)={&(0x7f0000000080)={0x12a8, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6fa3, 0x3a}}}}, [@NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9e}, @NL80211_ATTR_FRAME_MATCH={0xb4, 0x5b, "4cb44b26b9ed679d9c71e157ecae671f7a841c672075c7bc7640a769e53b2f01565fd2121a3397a9f1358dd965c7163e70389a6e73a825c9923748093750ae1a4593daf362307c6ceb5d6af637758221663cce8816c48533e03a42fceb302566ad22ae4bd39952f25f6ff796294d3903006da74fbf063e74036783b8d396d29b2f88edf3cb084f37efe462c739224dfdc3ec870f27133651383a30563662188279c0557e50d00d11d197734eda793b95"}, @NL80211_ATTR_FRAME_MATCH={0x20, 0x5b, "860ab02d2a63da78b83cf3baa4a5073ef65c8547b18dc1054405adab"}, @NL80211_ATTR_FRAME_MATCH={0xb4, 0x5b, "c6906ece5933d31013a0cffd60309fa62e71da1658e992b80007396927ff71fa904584cd91909e8bea2e11548b0ae184fa059c563eb9d77df9d476e721b7653a297963a2cd334226c4b486d42d3ddf950d557cfbc5725d61eef440f0ae1475eaabb71d549e09ac6b94a0f3c6c8803a04f76082c4065a1441f338907034a42dededa29b2569f148bebe8b26c4e2ecd280092bfc1a6e8974bc9e33819e96a7155534c65a993cd86a30386a31d347ed1d86"}, @NL80211_ATTR_FRAME_MATCH={0xda, 0x5b, "5fab14b7130122a407bea40cfec66537cd3d848658c1ee53280d0ae89645a05001c04f5ab2d9fcd4b7a4cd15d79da586032b1dd9ab676b796b4a2b9cfb062eff89589134cb38e1b6c0186ff6fc91aa4b3a4c9da438607de855f04a2e11881f58aa539c535b8248603a26fa3b2ae1ac9fb6ba7f682b3b7fc88152b7c94dcca91e682ab6d329aa16f9bc05dac74dada10129637ef4e42d90c7ce2c2ce0ff2d395d398cb7b8333e99ed445c171451eab2835852e2581b796f666b311f2e3fb5dac58ba1f0e82d90777f62a379c87285d5230b60f53f5e4a"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x28a}]}, 0x12a8}, 0x1, 0x0, 0x0, 0x4040}, 0x400c000) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x4) 18:54:56 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe0, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xeb}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) 18:54:56 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x80000001, 0x0, 0xffff, 0x80, 0xffffffffffffffff, 0x35, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x7}, 0x48) r2 = syz_io_uring_setup(0x385, &(0x7f0000000100)={0x0, 0x14b5}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r1, 0x5, 0x0, 0x9, 0x4, 0x1, {0x0, r3}}, 0x297f784b) (async) bind$rose(r0, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @null}, 0x1c) (async, rerun: 64) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) (rerun: 64) 18:54:56 executing program 4: syz_clone(0x44040700, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:56 executing program 0: epoll_create(0x1) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r0}) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000240)=0x5) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) accept4$rose(r2, &(0x7f0000000040)=@full={0xb, @dev, @rose, 0x0, [@default, @netrom, @default, @null, @rose, @bcast]}, &(0x7f00000002c0)=0x40, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x2, 0x16, 0x9, 0x5, 0x33, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010102, @in=@remote, 0x0, 0x4, 0x14}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d2}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d5}, @sadb_x_sec_ctx={0x17, 0x18, 0xc1, 0x3, 0xb0, "b0cf8338624205c8a9ef9efbb9939129b52c9994e2413878de8d965f6f023729ae879ddefaf5aba38d29829864e4b744afff4c0d7e7311efaaf2686ca740430d4772552ff653e60b89c9f242b6024072d113a72eec4734ea16ebdc61f77719620a204fbc51857ac7b173d1048d4aaa08d0d9b2d4407b9e3dac382c6239a7a92bcb7dfdda2a7db94590f90888b945c7279bc95fa29b3f11d07ddd3fffe1dadcfaa5b0a4829362f4cbcb8942f1d07d8b89"}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x8, 0x34ff}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e23, 0x101, @private1, 0x3}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x4, 0x0, 0x6e6bbb, 0x2, {0x6, 0x32, 0x2, 0x82, 0x0, 0x9, 0x0, @in=@broadcast, @in=@remote}}]}, 0x198}}, 0x20000000) syz_io_uring_setup(0x76f9, &(0x7f0000000300)={0x0, 0xc0c0, 0x1, 0x1, 0x15c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fec000/0x11000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) ioctl$SIOCRSGL2CALL(r4, 0x89e5, &(0x7f0000000500)=@default) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x9, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8000}, @alu={0x7, 0x0, 0x9, 0xa, 0x8, 0x10}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @exit, @exit, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000280)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x6, 0x81, 0xbc6}, 0x10}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r6, r7, 0x25, 0x18}, 0x10) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r5) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x6, 0x1, &(0x7f0000000400)="2877caa6b8fde4adcbc2732b553982b5314dd72b06173f9ad61af93ab339ba2129740ebb4d33b80e99bf61fe9b7dc79f2fc054e21aaa989b3a4898cb46027e7e04ca0387b5bb95f35c374b455a159e8893ae6139d89940055cea01a58b725edfb91f88b368453124e957dfe9c2df087d82190e06c3ef1499747ab0c46ee400486df327de7f5cfaa0fd2ac86f22e6cf706309039f901ac2ba", 0x9, 0x0, 0x0, {0x2, r5}}, 0x70) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x2, 0x48b4, 0x0, 0x9, 0x6}, 0xffff6b2e) 18:54:56 executing program 3: syz_clone(0x44040358, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:56 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) 18:54:56 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe0, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xeb}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe0, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xeb}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) ioctl$SIOCRSACCEPT(r0, 0x89e3) (async) 18:54:56 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x80000001, 0x0, 0xffff, 0x80, 0xffffffffffffffff, 0x35, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x7}, 0x48) r2 = syz_io_uring_setup(0x385, &(0x7f0000000100)={0x0, 0x14b5}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r1, 0x5, 0x0, 0x9, 0x4, 0x1, {0x0, r3}}, 0x297f784b) bind$rose(r0, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @null}, 0x1c) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:56 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) 18:54:56 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe0, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xeb}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) 18:54:56 executing program 0: syz_clone(0x44040349, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:56 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) 18:54:56 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) syz_io_uring_setup(0x41be, &(0x7f00000001c0)={0x0, 0x7312, 0x2, 0x6, 0x355}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000140)) r2 = syz_io_uring_setup(0x385, &(0x7f0000000100)={0x0, 0x14b5}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0, 0x803, 0x0, 0xffffff7e, 0x0, 0x0, {0x0, r3}}, 0x8) 18:54:56 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) r4 = syz_io_uring_complete(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4001) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r3, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x360}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) 18:54:56 executing program 4: syz_clone(0x44040803, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:56 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) sendto$rose(r0, &(0x7f0000001880)="0e117e44322421089343d1c7606f98058df0d20a3dc4f5be0eb6d728d058e00479ef8f82ef3935afb667b01a1ef3290a189f844ace62552cc356fa6693fa9805a8c3e3d2406d715597f7e218502fcb1e158ebc12bbf4b2cf6fb53f7be6e7e79b352c865e9329793dc3edfb5522c96611764e0e7b0d8dfef6aa7570edb70e642fccd033", 0x83, 0x0, &(0x7f0000001940)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x1, 0x1, 0x1, {0xa, 0x4e24, 0x1, @empty, 0x4}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="a36a56cb7db1d160856924e30401963405c977c58fac4abb1a8053c66eab3e57fa1e350bbeb0a2d56a69dab93ff4ed257a70f21075fa261db1b4837b4dd7d2bdf7ccfa9aabd230ea94cc4ec04b30f070e524027b7eb9fdfb8412734acfc3d62b5759b0de764f36865dc40bcadc4df7af4e226ea47e41c5607ac7c242fd7c65b66f4b1cd9d277af0bd46bb1aa44d9f2d2ee820770f78deb01821b7c68151c3119ed532b7070fdafd2599ed558427dfd6db0fb00b7ae3cc83fb5644ea8d8b20866898cd3cf98763902357299defb2ce3", 0xcf}, {&(0x7f00000001c0)="c0379b3af61f123f86cfd1f587776064d85dba66d93ae7c1e882297dc2c84f5c189de2583f403321e133e93a1ccce285a3d6c5e655d62a48e4d5ddb44bcbbf520f5e15775e2413dcc80207fac456e66dda97bea9460203ea715712b29ae97cf0c1e59869b7ebe532de30822e1d4c032675d5e251cff679cc2cbaa74b35c4c14c79a9", 0x82}], 0x2, &(0x7f00000002c0)=[{0x90, 0x117, 0x10000, "42a0bad2ba78df3c5d175e02df6a8ea097d02a3587226066c10ba773b4a2e5d80c6aa74232caf956f1fe7bab25f15f7b936f1ae6c5e8e5a7a15402091c8b8523f10e12f79eeacf55880ad44c0624b40adb9005ff1be99345dee99dc035590096dce0d288075cfd845cafa648fe74a0ef80e634f11a83b7a59c8c1e7568a9"}, {0x78, 0x112, 0x401, "c774596d034f4326ea0dda4efc8ca4bf7195d0cfdb8b8d99548d9b949bd8ff3020374a8c5faa089df187031e097596d0d0a0ffd20a5d99c1d9a1f4851c74746c80013afc9fadfae499b6c959c2501ff50c4feba00f32911bdba72e6d896d217977c819ef1e2bd5"}, {0xe0, 0x10d, 0x6, "1ad82e1818f75bfeb542ab2ffe2b3bce03fbd6be6a0eefeb75ec3bcca6aa0956b5fdfda0995f4772009ff1fc19a5b6f8cced2494f54e0790c5f3e64d74a3c9d138a3f1ecf927659f047a9137a6f3d14572ee418e01a2aa0b0e7bb05e19244ce100a35fd492802ac78c5ce0f45d212ce14d0f57c8a5141ea63203cf1e3f81d9155cb84a917ac2f89640c6863561e9767ef164eab04400e98e5505e62951aec498e162ac9974c041d5bd66792355ce22bdde46cccf9339c9629343ffe243b0b13887c1d7602f427ed7f4bc75b7e771"}, {0x1010, 0x104, 0x2, "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"}, {0xd0, 0x102, 0x0, "f938201803d5fa1fc1ad834c8970e95a3af0d79390e1f854269ad290bcc6ea3955392e8e9353ff6b648dd929a57624e049c5a4e2ff2b754cbe83fe7f62956880ecc07d3f2ad704d168153da08116b8270ee2f397d5b8ab8fc219f0b9b6fc7671302852b7b257aac3b4f3cc57f2b9a3f0f82f6dd809daa07cc6f69bef85220f32ed01c1b958bc2cbf3c6799fc299c77b612ba47870084bfb3f1c0642d90336126a2bbd6103f3af7c9649e5556c4f16cd522d47d7add7800400234f2"}, {0xe0, 0x119, 0xfffffffb, "43dd32dc71a7f637fd97e6f3e477e226205b81e7aae5bf591ce2b3594c718c433ba8aa9be4b13fb1ba21639a2ccc7c597a4cf8f757ffb7504974eae394f5b24b938659bd8d8f33bef5047df41c6248d6a3e76cdbb4d96b62d7cc91faa3fca3d777ec085ecadb5df6513d1fc307842427b137e4b4e113ffffaaf250057c40bc2176595bf683a812329955315dfcc8b1f51f9434be29bcf6753a4682e49d755221d457e19fe6b32232bd0160f51b3e75189b9871ed47c7fa02e3c63fc55144c35f269390123edbe58186"}, {0x108, 0x0, 0x9, "5ff9c8938f479a47d29851da5dd4ac260d7b608ba0f76ca4303bab983d48c5997034c451251a77a902006b0ede676ff5f5bc4ef9add4b29fe5df377aeee52a43e395a859acb6b6babb23ab6a7e03d34acf0e3aa97d5f512fd550f9ce848eb09415663ded8f8cc18e3d269a3c2e008eedd882c92ad614663bd8847536c1b447560cd9b44e94d4a92b038941f08481250c4be5c3b8db23b0ab35926a8259908901223d62f96c11566080b65f63f2ac0f401ce935ace77868dd2b3c393406622955e804a69dc2e0c2ed928d5276009dac14e041b80ab22de0d074375a782e574b75faf2b32fa2790c6b123b8f84af92748400264a17"}, {0xc0, 0x10b, 0x80000000, "e5178e91a0704e0172b656fa330698bb5d74366915a5ffc256b58ce9af15803be8266c19429d6eded5588e624b94f2894d63011b43debd68a2316d4317b807ecbceb583d7ed0e4e48ce7a0f0d2ab12ea804b2fa582492d6ccd766a336a02c3863b9072673ab0c177d190270a0ebf8579f9b4bc94b181f897b012a3141aa700ceef0c753b0ee26f72aaf02d29008bf82589e94b5b44cbd14111f76db8d2aaa2818d338fa9783540935f8ededc"}], 0x1570}, 0x0) 18:54:56 executing program 3: syz_clone(0x44040380, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:56 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) (async) r4 = syz_io_uring_complete(0x0) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4001) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r3, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x360}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) 18:54:56 executing program 4: syz_clone(0x44040e03, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:56 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) sendto$rose(r0, &(0x7f0000001880)="0e117e44322421089343d1c7606f98058df0d20a3dc4f5be0eb6d728d058e00479ef8f82ef3935afb667b01a1ef3290a189f844ace62552cc356fa6693fa9805a8c3e3d2406d715597f7e218502fcb1e158ebc12bbf4b2cf6fb53f7be6e7e79b352c865e9329793dc3edfb5522c96611764e0e7b0d8dfef6aa7570edb70e642fccd033", 0x83, 0x0, &(0x7f0000001940)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x1, 0x1, 0x1, {0xa, 0x4e24, 0x1, @empty, 0x4}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="a36a56cb7db1d160856924e30401963405c977c58fac4abb1a8053c66eab3e57fa1e350bbeb0a2d56a69dab93ff4ed257a70f21075fa261db1b4837b4dd7d2bdf7ccfa9aabd230ea94cc4ec04b30f070e524027b7eb9fdfb8412734acfc3d62b5759b0de764f36865dc40bcadc4df7af4e226ea47e41c5607ac7c242fd7c65b66f4b1cd9d277af0bd46bb1aa44d9f2d2ee820770f78deb01821b7c68151c3119ed532b7070fdafd2599ed558427dfd6db0fb00b7ae3cc83fb5644ea8d8b20866898cd3cf98763902357299defb2ce3", 0xcf}, {&(0x7f00000001c0)="c0379b3af61f123f86cfd1f587776064d85dba66d93ae7c1e882297dc2c84f5c189de2583f403321e133e93a1ccce285a3d6c5e655d62a48e4d5ddb44bcbbf520f5e15775e2413dcc80207fac456e66dda97bea9460203ea715712b29ae97cf0c1e59869b7ebe532de30822e1d4c032675d5e251cff679cc2cbaa74b35c4c14c79a9", 0x82}], 0x2, &(0x7f00000002c0)=[{0x90, 0x117, 0x10000, "42a0bad2ba78df3c5d175e02df6a8ea097d02a3587226066c10ba773b4a2e5d80c6aa74232caf956f1fe7bab25f15f7b936f1ae6c5e8e5a7a15402091c8b8523f10e12f79eeacf55880ad44c0624b40adb9005ff1be99345dee99dc035590096dce0d288075cfd845cafa648fe74a0ef80e634f11a83b7a59c8c1e7568a9"}, {0x78, 0x112, 0x401, "c774596d034f4326ea0dda4efc8ca4bf7195d0cfdb8b8d99548d9b949bd8ff3020374a8c5faa089df187031e097596d0d0a0ffd20a5d99c1d9a1f4851c74746c80013afc9fadfae499b6c959c2501ff50c4feba00f32911bdba72e6d896d217977c819ef1e2bd5"}, {0xe0, 0x10d, 0x6, "1ad82e1818f75bfeb542ab2ffe2b3bce03fbd6be6a0eefeb75ec3bcca6aa0956b5fdfda0995f4772009ff1fc19a5b6f8cced2494f54e0790c5f3e64d74a3c9d138a3f1ecf927659f047a9137a6f3d14572ee418e01a2aa0b0e7bb05e19244ce100a35fd492802ac78c5ce0f45d212ce14d0f57c8a5141ea63203cf1e3f81d9155cb84a917ac2f89640c6863561e9767ef164eab04400e98e5505e62951aec498e162ac9974c041d5bd66792355ce22bdde46cccf9339c9629343ffe243b0b13887c1d7602f427ed7f4bc75b7e771"}, {0x1010, 0x104, 0x2, "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"}, {0xd0, 0x102, 0x0, "f938201803d5fa1fc1ad834c8970e95a3af0d79390e1f854269ad290bcc6ea3955392e8e9353ff6b648dd929a57624e049c5a4e2ff2b754cbe83fe7f62956880ecc07d3f2ad704d168153da08116b8270ee2f397d5b8ab8fc219f0b9b6fc7671302852b7b257aac3b4f3cc57f2b9a3f0f82f6dd809daa07cc6f69bef85220f32ed01c1b958bc2cbf3c6799fc299c77b612ba47870084bfb3f1c0642d90336126a2bbd6103f3af7c9649e5556c4f16cd522d47d7add7800400234f2"}, {0xe0, 0x119, 0xfffffffb, "43dd32dc71a7f637fd97e6f3e477e226205b81e7aae5bf591ce2b3594c718c433ba8aa9be4b13fb1ba21639a2ccc7c597a4cf8f757ffb7504974eae394f5b24b938659bd8d8f33bef5047df41c6248d6a3e76cdbb4d96b62d7cc91faa3fca3d777ec085ecadb5df6513d1fc307842427b137e4b4e113ffffaaf250057c40bc2176595bf683a812329955315dfcc8b1f51f9434be29bcf6753a4682e49d755221d457e19fe6b32232bd0160f51b3e75189b9871ed47c7fa02e3c63fc55144c35f269390123edbe58186"}, {0x108, 0x0, 0x9, "5ff9c8938f479a47d29851da5dd4ac260d7b608ba0f76ca4303bab983d48c5997034c451251a77a902006b0ede676ff5f5bc4ef9add4b29fe5df377aeee52a43e395a859acb6b6babb23ab6a7e03d34acf0e3aa97d5f512fd550f9ce848eb09415663ded8f8cc18e3d269a3c2e008eedd882c92ad614663bd8847536c1b447560cd9b44e94d4a92b038941f08481250c4be5c3b8db23b0ab35926a8259908901223d62f96c11566080b65f63f2ac0f401ce935ace77868dd2b3c393406622955e804a69dc2e0c2ed928d5276009dac14e041b80ab22de0d074375a782e574b75faf2b32fa2790c6b123b8f84af92748400264a17"}, {0xc0, 0x10b, 0x80000000, "e5178e91a0704e0172b656fa330698bb5d74366915a5ffc256b58ce9af15803be8266c19429d6eded5588e624b94f2894d63011b43debd68a2316d4317b807ecbceb583d7ed0e4e48ce7a0f0d2ab12ea804b2fa582492d6ccd766a336a02c3863b9072673ab0c177d190270a0ebf8579f9b4bc94b181f897b012a3141aa700ceef0c753b0ee26f72aaf02d29008bf82589e94b5b44cbd14111f76db8d2aaa2818d338fa9783540935f8ededc"}], 0x1570}, 0x0) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) sendto$rose(r0, &(0x7f0000001880)="0e117e44322421089343d1c7606f98058df0d20a3dc4f5be0eb6d728d058e00479ef8f82ef3935afb667b01a1ef3290a189f844ace62552cc356fa6693fa9805a8c3e3d2406d715597f7e218502fcb1e158ebc12bbf4b2cf6fb53f7be6e7e79b352c865e9329793dc3edfb5522c96611764e0e7b0d8dfef6aa7570edb70e642fccd033", 0x83, 0x0, &(0x7f0000001940)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x1, 0x1, 0x1, {0xa, 0x4e24, 0x1, @empty, 0x4}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="a36a56cb7db1d160856924e30401963405c977c58fac4abb1a8053c66eab3e57fa1e350bbeb0a2d56a69dab93ff4ed257a70f21075fa261db1b4837b4dd7d2bdf7ccfa9aabd230ea94cc4ec04b30f070e524027b7eb9fdfb8412734acfc3d62b5759b0de764f36865dc40bcadc4df7af4e226ea47e41c5607ac7c242fd7c65b66f4b1cd9d277af0bd46bb1aa44d9f2d2ee820770f78deb01821b7c68151c3119ed532b7070fdafd2599ed558427dfd6db0fb00b7ae3cc83fb5644ea8d8b20866898cd3cf98763902357299defb2ce3", 0xcf}, {&(0x7f00000001c0)="c0379b3af61f123f86cfd1f587776064d85dba66d93ae7c1e882297dc2c84f5c189de2583f403321e133e93a1ccce285a3d6c5e655d62a48e4d5ddb44bcbbf520f5e15775e2413dcc80207fac456e66dda97bea9460203ea715712b29ae97cf0c1e59869b7ebe532de30822e1d4c032675d5e251cff679cc2cbaa74b35c4c14c79a9", 0x82}], 0x2, &(0x7f00000002c0)=[{0x90, 0x117, 0x10000, "42a0bad2ba78df3c5d175e02df6a8ea097d02a3587226066c10ba773b4a2e5d80c6aa74232caf956f1fe7bab25f15f7b936f1ae6c5e8e5a7a15402091c8b8523f10e12f79eeacf55880ad44c0624b40adb9005ff1be99345dee99dc035590096dce0d288075cfd845cafa648fe74a0ef80e634f11a83b7a59c8c1e7568a9"}, {0x78, 0x112, 0x401, "c774596d034f4326ea0dda4efc8ca4bf7195d0cfdb8b8d99548d9b949bd8ff3020374a8c5faa089df187031e097596d0d0a0ffd20a5d99c1d9a1f4851c74746c80013afc9fadfae499b6c959c2501ff50c4feba00f32911bdba72e6d896d217977c819ef1e2bd5"}, {0xe0, 0x10d, 0x6, "1ad82e1818f75bfeb542ab2ffe2b3bce03fbd6be6a0eefeb75ec3bcca6aa0956b5fdfda0995f4772009ff1fc19a5b6f8cced2494f54e0790c5f3e64d74a3c9d138a3f1ecf927659f047a9137a6f3d14572ee418e01a2aa0b0e7bb05e19244ce100a35fd492802ac78c5ce0f45d212ce14d0f57c8a5141ea63203cf1e3f81d9155cb84a917ac2f89640c6863561e9767ef164eab04400e98e5505e62951aec498e162ac9974c041d5bd66792355ce22bdde46cccf9339c9629343ffe243b0b13887c1d7602f427ed7f4bc75b7e771"}, {0x1010, 0x104, 0x2, "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"}, {0xd0, 0x102, 0x0, "f938201803d5fa1fc1ad834c8970e95a3af0d79390e1f854269ad290bcc6ea3955392e8e9353ff6b648dd929a57624e049c5a4e2ff2b754cbe83fe7f62956880ecc07d3f2ad704d168153da08116b8270ee2f397d5b8ab8fc219f0b9b6fc7671302852b7b257aac3b4f3cc57f2b9a3f0f82f6dd809daa07cc6f69bef85220f32ed01c1b958bc2cbf3c6799fc299c77b612ba47870084bfb3f1c0642d90336126a2bbd6103f3af7c9649e5556c4f16cd522d47d7add7800400234f2"}, {0xe0, 0x119, 0xfffffffb, "43dd32dc71a7f637fd97e6f3e477e226205b81e7aae5bf591ce2b3594c718c433ba8aa9be4b13fb1ba21639a2ccc7c597a4cf8f757ffb7504974eae394f5b24b938659bd8d8f33bef5047df41c6248d6a3e76cdbb4d96b62d7cc91faa3fca3d777ec085ecadb5df6513d1fc307842427b137e4b4e113ffffaaf250057c40bc2176595bf683a812329955315dfcc8b1f51f9434be29bcf6753a4682e49d755221d457e19fe6b32232bd0160f51b3e75189b9871ed47c7fa02e3c63fc55144c35f269390123edbe58186"}, {0x108, 0x0, 0x9, "5ff9c8938f479a47d29851da5dd4ac260d7b608ba0f76ca4303bab983d48c5997034c451251a77a902006b0ede676ff5f5bc4ef9add4b29fe5df377aeee52a43e395a859acb6b6babb23ab6a7e03d34acf0e3aa97d5f512fd550f9ce848eb09415663ded8f8cc18e3d269a3c2e008eedd882c92ad614663bd8847536c1b447560cd9b44e94d4a92b038941f08481250c4be5c3b8db23b0ab35926a8259908901223d62f96c11566080b65f63f2ac0f401ce935ace77868dd2b3c393406622955e804a69dc2e0c2ed928d5276009dac14e041b80ab22de0d074375a782e574b75faf2b32fa2790c6b123b8f84af92748400264a17"}, {0xc0, 0x10b, 0x80000000, "e5178e91a0704e0172b656fa330698bb5d74366915a5ffc256b58ce9af15803be8266c19429d6eded5588e624b94f2894d63011b43debd68a2316d4317b807ecbceb583d7ed0e4e48ce7a0f0d2ab12ea804b2fa582492d6ccd766a336a02c3863b9072673ab0c177d190270a0ebf8579f9b4bc94b181f897b012a3141aa700ceef0c753b0ee26f72aaf02d29008bf82589e94b5b44cbd14111f76db8d2aaa2818d338fa9783540935f8ededc"}], 0x1570}, 0x0) (async) 18:54:56 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) syz_io_uring_setup(0x41be, &(0x7f00000001c0)={0x0, 0x7312, 0x2, 0x6, 0x355}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000140)) r2 = syz_io_uring_setup(0x385, &(0x7f0000000100)={0x0, 0x14b5}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0, 0x803, 0x0, 0xffffff7e, 0x0, 0x0, {0x0, r3}}, 0x8) 18:54:56 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) (async) r4 = syz_io_uring_complete(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4001) (async) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r3, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x360}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) 18:54:57 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) (async) syz_io_uring_setup(0x41be, &(0x7f00000001c0)={0x0, 0x7312, 0x2, 0x6, 0x355}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000140)) (async) r2 = syz_io_uring_setup(0x385, &(0x7f0000000100)={0x0, 0x14b5}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0, 0x803, 0x0, 0xffffff7e, 0x0, 0x0, {0x0, r3}}, 0x8) 18:54:57 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) sendto$rose(r0, &(0x7f0000001880)="0e117e44322421089343d1c7606f98058df0d20a3dc4f5be0eb6d728d058e00479ef8f82ef3935afb667b01a1ef3290a189f844ace62552cc356fa6693fa9805a8c3e3d2406d715597f7e218502fcb1e158ebc12bbf4b2cf6fb53f7be6e7e79b352c865e9329793dc3edfb5522c96611764e0e7b0d8dfef6aa7570edb70e642fccd033", 0x83, 0x0, &(0x7f0000001940)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x1, 0x1, 0x1, {0xa, 0x4e24, 0x1, @empty, 0x4}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000000c0)="a36a56cb7db1d160856924e30401963405c977c58fac4abb1a8053c66eab3e57fa1e350bbeb0a2d56a69dab93ff4ed257a70f21075fa261db1b4837b4dd7d2bdf7ccfa9aabd230ea94cc4ec04b30f070e524027b7eb9fdfb8412734acfc3d62b5759b0de764f36865dc40bcadc4df7af4e226ea47e41c5607ac7c242fd7c65b66f4b1cd9d277af0bd46bb1aa44d9f2d2ee820770f78deb01821b7c68151c3119ed532b7070fdafd2599ed558427dfd6db0fb00b7ae3cc83fb5644ea8d8b20866898cd3cf98763902357299defb2ce3", 0xcf}, {&(0x7f00000001c0)="c0379b3af61f123f86cfd1f587776064d85dba66d93ae7c1e882297dc2c84f5c189de2583f403321e133e93a1ccce285a3d6c5e655d62a48e4d5ddb44bcbbf520f5e15775e2413dcc80207fac456e66dda97bea9460203ea715712b29ae97cf0c1e59869b7ebe532de30822e1d4c032675d5e251cff679cc2cbaa74b35c4c14c79a9", 0x82}], 0x2, &(0x7f00000002c0)=[{0x90, 0x117, 0x10000, "42a0bad2ba78df3c5d175e02df6a8ea097d02a3587226066c10ba773b4a2e5d80c6aa74232caf956f1fe7bab25f15f7b936f1ae6c5e8e5a7a15402091c8b8523f10e12f79eeacf55880ad44c0624b40adb9005ff1be99345dee99dc035590096dce0d288075cfd845cafa648fe74a0ef80e634f11a83b7a59c8c1e7568a9"}, {0x78, 0x112, 0x401, "c774596d034f4326ea0dda4efc8ca4bf7195d0cfdb8b8d99548d9b949bd8ff3020374a8c5faa089df187031e097596d0d0a0ffd20a5d99c1d9a1f4851c74746c80013afc9fadfae499b6c959c2501ff50c4feba00f32911bdba72e6d896d217977c819ef1e2bd5"}, {0xe0, 0x10d, 0x6, "1ad82e1818f75bfeb542ab2ffe2b3bce03fbd6be6a0eefeb75ec3bcca6aa0956b5fdfda0995f4772009ff1fc19a5b6f8cced2494f54e0790c5f3e64d74a3c9d138a3f1ecf927659f047a9137a6f3d14572ee418e01a2aa0b0e7bb05e19244ce100a35fd492802ac78c5ce0f45d212ce14d0f57c8a5141ea63203cf1e3f81d9155cb84a917ac2f89640c6863561e9767ef164eab04400e98e5505e62951aec498e162ac9974c041d5bd66792355ce22bdde46cccf9339c9629343ffe243b0b13887c1d7602f427ed7f4bc75b7e771"}, {0x1010, 0x104, 0x2, "f9b4340beb4669f3f7619fd4fd6761bdd49e8a4245799cb7d59e47b9ad15e95b1cdb504fbc565b9543aa9f93f5f1bc284c99668c0bc2d1e199d92b3e762e6eba23c81f73320526ff25ea69b15529b736ed78d7ac23b95ca33f32edbf8532c8ff5ee5d2d02d9cd4d344d0149a69d79fd6863ebf13081ceeff95faf06b95277b23e10f95b871dec2c752b993c0d1a15c7dc5875bedbb31834ec06a31ff6c62aa5f4eaebc46b568c89f95eff42fd50fbc60d8fdfc26103efc843a4e17c525e9dcde5b28ac2dd7b6eb7f9b7de90ea15313e02c3fd43cb15c82119f0616b67404c640f1a6f9be023e6ce2f2384662ac740c526af041833ff256fa37fc61c7e1157670f278731a547490391cc7888aeee44b5683a59dcdb3530ede4d6565ee1824516f98229a17e704ea3188a57ad246476977f6b176284eed7793e0d009499c93e3432c6aa3dc22dc9372e06ce488d7380810afa9e493e89f86273a228917ab3ac26dff463b27cc19c6ac8ee0412050a10e702ecc6e3ff1a6139ced34ef40703d4e0ef42e74a5309eea09d7c4120863f12631668c3f93e3adadc5c32877fecec08cd26900530297c488394bbe0acb5fb4d5aaff3faad6ec6c61958dba84e97edca08153bf4b71cada1034282c3a11ed8a89e159ed605220a8fb5e6ddc0beab14c5e215cdd9ded61fd3d82b4fedaa8379fcb529cd29a57e02f1fbaf24900ec77ca1b3e56390f81051807b2b3818ddb89d9acb63778aed504caf3829d0777cd8bd872a05b6aceef7b77ecf040f9ffd9af59fa0ed51146f0e609c1c97755750e0c10a9fcbbf694bad8ff25ff54b730388b1b6ad8ffa1228b4de58fb12662ff2580abf101c5e3b4d0da51937d88d9f6877e0df7960c8a8981a068d19b4ad69aef353afd2b4b7f1b2b964d3c57468cc8e4322c659ba85aba8067028083e302028837d1ac49f98500729909acd3af2ddacd2786f6794b40ad77bbf468c86b397d90fe27b43390d110d873c140a666a155eec11db227bf13d3538db8d9a52f1898d03869ae6bf1efa6d231e36f4d17019ddc8b0ec924a8b8ca591fe44cfeece6fe470be2fe1900591950bfa9cfb5a9e779d6fc332af33c525f1fbf019c4200ca47b2c566b808dfe3a5858bf0498eff871519209eb99ee02fa7804bfd898bf656b074dd7599ebb5cfd0492e52ecb401beb72183186313edfd7ad3ad2efa5dfbb67f124e028c5c5173bc76ffdd1eab79aeedee09cb0174a762b06823e830e0e3eec80eabd07c90b9a6a170858a9a5a41c4a8e0369eb1f4ddc2a769180ee01c2750d66577157091064b36dd5cfb7461f0c78adac13fe15bf3de19e8121f31e7f539448607eaf4f6c08768799081a0f7a8ad59cd310d97e2fffe11017e865e2dda55e1c52b0f2ca65634b804f277c2b16a4121fbc15e9a14f731838a7fdea833768fff6b9c18e03325fcba611da71d98bcf7b25dfbe08dfe59ab2f05bc203e5c702dd0f7b29cb57eb387c429fad036c56f3bdb343d4f4712f53f36c62d874eb76b0a71c6667ebf157b7d1d087e89803d89d1ffe813a8c735be4f26b0784e0cdffd02ab2fec9e57b94dfc7e7febb5e1adde889208ecfab9c3d5ff49c140f25fbcb2f07b78c67b6c5ddf76522ce00fd870dae2c77867a5df52a2ff97877a475312afb6d2b5f1df9b6dea717c80693e0d35d458896280e2ee6f3328d684c3ecac9ac4f0ed0b85b241a73ea8aef33aa59db9c1ebc1c393ff800080490808e2621debcd429c8e072f38e3611a2aa74fbbdda5baa33a13f290aad50110b5200673fba5b46dca58cc6da89499f8a41c942cb25860505c27f193912c74d2737656866f89d13a87b185af141dcf6983a3c7fcc6a5fec51b921565c3749187db51e2d37666dd070b139debba39019c1167a99dd465b808e6fdd430a368ce45d63dedcb886d2488180aca12c2c88ed7a0e6594803b6c677d8a7631792930bac1c3e8088f7e278253b586ea50299a77b85d5b189815e43c80a9b17801a4c8d86f79d29699acec78b57a5ed019194217249c5da66fb55d067d855ce54f3886a644529af649b08ec536ad7640d3f3fe3f09ed661e2982548b1dff7d78726e809ef10d1db6a8681a88afa6c930f903aa721ba8e937cbc5eb07623d22db92315a6098442b62fd705f59008b1296222b02038ee121b7ad4eb6d3f478b97aec99b72b2e1b63cc513a791a5d66411e58a51b3dc4c03f7f77e18362a07b9be1d92131ce06b022a252aa1fbdf8b47a1420c1aa9498ccec9a585e0a7ff02cd7238ffb26a8427904652d04bf5b8748315b563c86488a7f4e40b634464d7e613ea58101c73bedc5d0698a474e4966f8b441895451ad0d6160eb74d661d545a78a8b6b8f8d9de41b35c0041ec69b58f701ad69596caab8e7627aaa7239fc6736a4eb4364fe44822c214e745f9577b96c4f3250d4084e9e330df90117a917e5c57d21ed0143e2cb1dec8c19e4b16c42aa67344e4065e5b1cf1e0b4db6063700261127262323a3ea934d5e78e6b14822c15b2c8270d872289ed81c365ac5d7ff2899417d255d8f7bcb1fec81598dc5a4acd3dd855084320a51b5cda7fd5935368696392e60a9bbce52e6614e34c5bd2b80fe8f701f42e4688babe08cae44535f37dd74c170d2a5f699241c54b394e7257cf3b1acc99ab0fa1bbbdf8aa319b51df6517a7e1d79ad7fffe7b5494347eec886bc2ff75e086f762a359cd3da239002884f0088d26cdf521b9ea841d2b6d2968f86362f0b995ea46eb503165faf550b264a0bd3f64dba1e87c41af17ccacb8d13e7c117dc526842e7c0a179d0b703023fadc86b919eda02764b9d6738a9fccd7cbfcd5b7788fc40163684920e213206042268d90728c56f9465a7a82a3ecba15ef63a40784a58303839bd03c5fd3ecd8fa6aa5519272cc4c38511dcc51ffc8575696d356b54577cd1d9496ee5d4abb51215464c15ff754f28186e25b27608dbffb79f4cc8d2c554a78aa227393c37fa5e5c90b0da7fdb3893fea960dc0744de71cdff9fd38451971850d15b1b87895feef7e04b63e4c8cc6de81d0a03cd671b6f14ba1f895b4e6dbf6f5fa6cca5e86a54788541291c1f1fa8cc9846f3882c447cac6fd22377059c3eb5e6f64c52a70f7da3063155b3ebc7b8d3e217c5ab269d4c81a0485a4ed8396cd87a4f47ca392cbbc968d2ef08403e13514af8b81a2dfbb671371cbd3e9c3b7351c063d90def9457f82b4cd9057d1775e63a9368997a3917a19bb235b1d1bcc21f0029e226a5f2564a499f4ebccc845176ae1c994db6ab1cc2078e5d67b55fd2cc963975ecf5c1f297567e795e2f75596df33e204217561c465396a20bb1445d2356243bf9762efd26edb2606cbd58a2060398e8715ef9458aef01994ca86a00a034f426a3f66d77b34b14fd62f02cb704d22ae8d13c3633cc8d40df95ff2a822b800a633903edb1a8331ac94529914410bd846c89d17968e3e894841d74aacb8949368b46e75411e17dd0b4d96daec05b0aaa9b338813f32f5fcfdc16ae0773886e95217ac92cfeb6ffcdc207bec8111211bd973682cfd8ebb0b6db4e8e6a73b025151c581cb63ac6fa09899c90b7da1ba3a31abba46f2a9e2726e637b9ebdc88fc9a32cda4a0732385820fffc06970dd107ce4bdb3b9ea276225f1a70fb444f2f08ed3ac5fe648d52d991d376a2bab6023cee372aa6271cff2ce07659e35bbde0ff15f52581b78752f6abf776b55aa04db806307aad5252767660cb89ce5825f09d986174eeeafefdff828b6117bff228cfa0423296bd6d4e8b67954dfd1f5f073b80f84864e4b8a18933054e51732e05142806c04f3a550e4fbed8e99c12bf647e6b094742fd5f9a4c3146f46189964ea153dd025592211814155166075ff91a626222483670be37ab3b494d30bef9092626298962831b8d6891900757e2760b8ee638fa0e7386e3ce9d2fa6e27270bf728ad48ac8962aa991d709f28df7dc111fff5b1bb121220cf7cdad1ff72bfbe90c245696ae132236befc0d8293d31eb2c58371dda6f8342fa412e31e523158febb8a8f19816677ff1ead7b962ed8d6bd40cdcc316f25a9d1cdbd3748d142bf671689ad99b7fcd0437552c91242d74aa2ecdb70909f12f7ec6b622c94cfe6c306ba3174cb25bb0b76e3d5fde15f438856bf2d709e52c032d43620498ca293ff92e940a26eaa294af10caaef199324a99149d3c069b022a831345589ad73bc72f8f20681f9db9aab4fb3e1fbcd956c8ce6900b9243d9d1c7d367ea45533178ad1cc8ef75e5ac73399244a59a3bf55376f9b05ab667647d064d39fce4291c99ee4f5256834f909db2102c0f7579529a06032826f84acce7ad08b5de6de3df92a886bbd238dd5be4161f0ab8388d9630b2e53c23d1e96699831e12de78f903a4f53a8b39ec9edb35b3409d58fbcac68e34aa50800b5b7d2dd51797b7778714d09311eeeb87132318071c3f3038d50599d1880b4363f7a1e9352963754fcfa94fa8527037b6ac2e4288194b86d228d81e16cbf4f4f77230b30de508b64ca09b1545c444f65817c66ec05fb4ad7a2de86073ffa7df662425317b419d0320a57333716297794d6ebc02991e9100df580699ad0f91547a70e4da98abd13e42128c87945c86d33e2901461f523afc384273907fe99cc138dac96414c3c549f3ecaf24598a22b71b06a1b98b560c11e6803cdbfd6cbb5b9ec64cef37fe417204d602e9e8a85706284edcedffc21e06457543d9ad0ae9dd1b6e4e191cc25b5306694b8f39d80b65ad346d8126ebb0a2e6cfdc7ab08421c333fb11611981deccfedd3d374ea635240ad4f2a7d767efa0aa057ff0e1b2104a0739354525ffe9ec4f2f010182ddad62d9120bc320f32570f7e2a2c8026ed6e2155da463722c2c2fa42559311dd155840e78d8a7b22c93844d7b7972d286921127c83c6f3f8d1cecf54b6fa7c88a8854781d20f675f1936716627cbdd65e3d0709ed80b3ee0480bd95ae3fc9a06841051fa02bf0517c81cf20a15515dd548af77190ea341a56728489dbd6722369293e2fe2031456206db562871058b5a25ee320cb284aeabfab96be593daed4f0733d557a61f73feae03c4099428fcf79b4ea49011fa3c166ad635976eef1f576fa5fc2c7e187ab6168f58ffbbcc289ea33c1cc11b174cf60e894cc0268caca02daa413c398c472459153465178433b76cc2e6fd6bc9fb08d455d84899827779c844927631e4c652fb82279e65fb3e6be017e4b3fab8ee132d29d69fb8798038da7c281f09258a30f8427f96bb38ddc6e5261df8ba6aebf4ae40b0c624b0c83c17119254ae1448b7fbd54c2fae4412fd3ceec4c1a06561fd866e236c0b2250f4695f3b4383009cd3a8a53e66dcd5595945d3878505339d55933ce70bcb79bda224ae30e37ffaa93cf03ecb1713b4a71ca488f6355147f55f3238d5ad6ba82bb4c1cac51dccdc2697bc08befc5f3ebbd6644edad3954faa31029234fcd21d7eb554cf2134b473ff5fb63e5a6cd076dda923832398c2bf54a71ab5be23e1f154daca14ec86ecb3ccadb71ce1508dd6637855e796b5fb2cfc3b3b8962a483a60ec927df47c4bc4bb62ce938ad3c76245326079a0b7757d3a0fc083be8bc576998cf124aeb2b9c1d27992d5b86d4675371c2451dabd9252abda82dc830536a2013312935d36d1337e15afea8e108b522dbe940b79535a900744756c0d84c3fc671fdd35a7fe57dd274944495ec5d988b593e529ab51599ba235f9692f783f9feb27eb186bb151f7066569de8149"}, {0xd0, 0x102, 0x0, "f938201803d5fa1fc1ad834c8970e95a3af0d79390e1f854269ad290bcc6ea3955392e8e9353ff6b648dd929a57624e049c5a4e2ff2b754cbe83fe7f62956880ecc07d3f2ad704d168153da08116b8270ee2f397d5b8ab8fc219f0b9b6fc7671302852b7b257aac3b4f3cc57f2b9a3f0f82f6dd809daa07cc6f69bef85220f32ed01c1b958bc2cbf3c6799fc299c77b612ba47870084bfb3f1c0642d90336126a2bbd6103f3af7c9649e5556c4f16cd522d47d7add7800400234f2"}, {0xe0, 0x119, 0xfffffffb, "43dd32dc71a7f637fd97e6f3e477e226205b81e7aae5bf591ce2b3594c718c433ba8aa9be4b13fb1ba21639a2ccc7c597a4cf8f757ffb7504974eae394f5b24b938659bd8d8f33bef5047df41c6248d6a3e76cdbb4d96b62d7cc91faa3fca3d777ec085ecadb5df6513d1fc307842427b137e4b4e113ffffaaf250057c40bc2176595bf683a812329955315dfcc8b1f51f9434be29bcf6753a4682e49d755221d457e19fe6b32232bd0160f51b3e75189b9871ed47c7fa02e3c63fc55144c35f269390123edbe58186"}, {0x108, 0x0, 0x9, "5ff9c8938f479a47d29851da5dd4ac260d7b608ba0f76ca4303bab983d48c5997034c451251a77a902006b0ede676ff5f5bc4ef9add4b29fe5df377aeee52a43e395a859acb6b6babb23ab6a7e03d34acf0e3aa97d5f512fd550f9ce848eb09415663ded8f8cc18e3d269a3c2e008eedd882c92ad614663bd8847536c1b447560cd9b44e94d4a92b038941f08481250c4be5c3b8db23b0ab35926a8259908901223d62f96c11566080b65f63f2ac0f401ce935ace77868dd2b3c393406622955e804a69dc2e0c2ed928d5276009dac14e041b80ab22de0d074375a782e574b75faf2b32fa2790c6b123b8f84af92748400264a17"}, {0xc0, 0x10b, 0x80000000, "e5178e91a0704e0172b656fa330698bb5d74366915a5ffc256b58ce9af15803be8266c19429d6eded5588e624b94f2894d63011b43debd68a2316d4317b807ecbceb583d7ed0e4e48ce7a0f0d2ab12ea804b2fa582492d6ccd766a336a02c3863b9072673ab0c177d190270a0ebf8579f9b4bc94b181f897b012a3141aa700ceef0c753b0ee26f72aaf02d29008bf82589e94b5b44cbd14111f76db8d2aaa2818d338fa9783540935f8ededc"}], 0x1570}, 0x0) 18:54:57 executing program 4: syz_clone(0x44041100, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:57 executing program 5: socketpair(0x26, 0x4, 0x10006, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 18:54:57 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) syz_io_uring_setup(0x41be, &(0x7f00000001c0)={0x0, 0x7312, 0x2, 0x6, 0x355}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000140)) r2 = syz_io_uring_setup(0x385, &(0x7f0000000100)={0x0, 0x14b5}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0, 0x803, 0x0, 0xffffff7e, 0x0, 0x0, {0x0, r3}}, 0x8) 18:54:57 executing program 3: syz_clone(0x4404039a, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:57 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x1, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}, 0x40) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:57 executing program 5: socketpair(0x26, 0x4, 0x10006, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 18:54:57 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x0, 0x618, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x17}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8000000}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x154d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000000}, 0x8810) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) 18:54:57 executing program 5: socketpair(0x26, 0x4, 0x10006, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socketpair(0x26, 0x4, 0x10006, &(0x7f0000000000)) (async) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) 18:54:57 executing program 0: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) r4 = syz_io_uring_complete(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r6, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4001) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r3, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x50}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x360}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) 18:54:57 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x1, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}, 0x40) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x1, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}, 0x40) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) (async) 18:54:57 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x0, 0x618, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x17}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8000000}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x154d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000000}, 0x8810) (async) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) 18:54:57 executing program 5: syz_clone(0xc810a100, 0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)="0cb7cfc06dd465cf216b67c9829aa839e60e5a31") socketpair(0x26, 0x4, 0x3, &(0x7f0000000000)) 18:54:57 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x1, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}, 0x40) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:57 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x1, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}, 0x40) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:54:57 executing program 4: syz_clone(0x44041c01, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:57 executing program 3: syz_clone(0x4404039c, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:57 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x0, 0x618, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x17}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8000000}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x154d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000000}, 0x8810) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x0, 0x618, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x17}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8000000}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x154d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000000}, 0x8810) (async) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) (async) 18:54:57 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r2, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7ff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x13ea}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]]}, 0x64}, 0x1, 0x0, 0x0, 0xc800}, 0x80) 18:54:57 executing program 0: syz_clone(0x44041100, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:57 executing program 4: syz_clone(0x44041e00, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:57 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)=0x5) 18:54:57 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r2, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7ff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x13ea}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]]}, 0x64}, 0x1, 0x0, 0x0, 0xc800}, 0x80) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) (async) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r2, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7ff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x13ea}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]]}, 0x64}, 0x1, 0x0, 0x0, 0xc800}, 0x80) (async) 18:54:57 executing program 4: syz_clone(0x44041f00, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:57 executing program 5: syz_clone(0xc810a100, 0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)="0cb7cfc06dd465cf216b67c9829aa839e60e5a31") socketpair(0x26, 0x4, 0x3, &(0x7f0000000000)) 18:54:57 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) (async) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)=0x5) 18:54:57 executing program 4: syz_clone(0x44042000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:57 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) (async) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) (async) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r2, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7ff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x13ea}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]]}, 0x64}, 0x1, 0x0, 0x0, 0xc800}, 0x80) 18:54:58 executing program 3: syz_clone(0x440403a0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:58 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) (async, rerun: 32) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)=0x5) (rerun: 32) 18:54:58 executing program 2: syz_clone(0xc810a100, 0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)="0cb7cfc06dd465cf216b67c9829aa839e60e5a31") socketpair(0x26, 0x4, 0x3, &(0x7f0000000000)) 18:54:58 executing program 0: syz_clone(0x44041100, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:58 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) 18:54:58 executing program 4: syz_clone(0x44042400, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:58 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) ioctl$SIOCRSACCEPT(r0, 0x89e3) 18:54:58 executing program 5: syz_clone(0xc810a100, 0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)="0cb7cfc06dd465cf216b67c9829aa839e60e5a31") socketpair(0x26, 0x4, 0x3, &(0x7f0000000000)) syz_clone(0xc810a100, 0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)="0cb7cfc06dd465cf216b67c9829aa839e60e5a31") (async) socketpair(0x26, 0x4, 0x3, &(0x7f0000000000)) (async) 18:54:58 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) ioctl$SIOCRSACCEPT(r0, 0x89e3) 18:54:58 executing program 3: syz_clone(0x440403c4, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r1, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x1}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x44}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) 18:54:58 executing program 2: syz_clone(0x440403a0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r1, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x1}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x44}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) (async) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) 18:54:58 executing program 0: syz_clone(0x44041100, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r1, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x1}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x44}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) 18:54:59 executing program 4: syz_clone(0x44042c01, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:59 executing program 4: syz_clone(0x44042e03, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:59 executing program 1: syz_clone(0x44042000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:59 executing program 4: syz_clone(0x44043402, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:59 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x42}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) 18:54:59 executing program 3: syz_clone(0x440403c6, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:59 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:59 executing program 2: syz_clone(0x4404039c, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:59 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x42}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x42}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) (async) 18:54:59 executing program 1: syz_clone(0x4404039a, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:59 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:59 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x42}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) 18:54:59 executing program 4: syz_clone(0x44043500, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:59 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:59 executing program 5: socketpair(0x1d, 0x5, 0x0, &(0x7f0000000000)) syz_io_uring_complete(0x0) 18:54:59 executing program 3: syz_clone(0x440403c9, 0x0, 0x0, 0x0, 0x0, 0x0) 18:54:59 executing program 5: socketpair(0x1d, 0x5, 0x0, &(0x7f0000000000)) (async, rerun: 32) syz_io_uring_complete(0x0) (rerun: 32) [ 1678.093860][T21229] can: request_module (can-proto-0) failed. 18:55:00 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1678.302779][T21233] can: request_module (can-proto-0) failed. 18:55:00 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:00 executing program 1: epoll_create(0x1) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r0}) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000240)=0x5) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) accept4$rose(r2, &(0x7f0000000040)=@full={0xb, @dev, @rose, 0x0, [@default, @netrom, @default, @null, @rose, @bcast]}, &(0x7f00000002c0)=0x40, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x2, 0x16, 0x9, 0x5, 0x33, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x64010102, @in=@remote, 0x0, 0x4, 0x14}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d2}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d5}, @sadb_x_sec_ctx={0x17, 0x18, 0xc1, 0x3, 0xb0, "b0cf8338624205c8a9ef9efbb9939129b52c9994e2413878de8d965f6f023729ae879ddefaf5aba38d29829864e4b744afff4c0d7e7311efaaf2686ca740430d4772552ff653e60b89c9f242b6024072d113a72eec4734ea16ebdc61f77719620a204fbc51857ac7b173d1048d4aaa08d0d9b2d4407b9e3dac382c6239a7a92bcb7dfdda2a7db94590f90888b945c7279bc95fa29b3f11d07ddd3fffe1dadcfaa5b0a4829362f4cbcb8942f1d07d8b89"}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x8, 0x34ff}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e23, 0x101, @private1, 0x3}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x4, 0x0, 0x6e6bbb, 0x2, {0x6, 0x32, 0x2, 0x82, 0x0, 0x9, 0x0, @in=@broadcast, @in=@remote}}]}, 0x198}}, 0x20000000) syz_io_uring_setup(0x76f9, &(0x7f0000000300)={0x0, 0xc0c0, 0x1, 0x1, 0x15c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fec000/0x11000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) ioctl$SIOCRSGL2CALL(r4, 0x89e5, &(0x7f0000000500)=@default) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x9, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8000}, @alu={0x7, 0x0, 0x9, 0xa, 0x8, 0x10}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @exit, @exit, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000280)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x6, 0x81, 0xbc6}, 0x10}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r6, r7, 0x25, 0x18}, 0x10) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r5) syz_io_uring_submit(0x0, r3, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x6, 0x1, &(0x7f0000000400)="2877caa6b8fde4adcbc2732b553982b5314dd72b06173f9ad61af93ab339ba2129740ebb4d33b80e99bf61fe9b7dc79f2fc054e21aaa989b3a4898cb46027e7e04ca0387b5bb95f35c374b455a159e8893ae6139d89940055cea01a58b725edfb91f88b368453124e957dfe9c2df087d82190e06c3ef1499747ab0c46ee400486df327de7f5cfaa0fd2ac86f22e6cf706309039f901ac2ba", 0x9, 0x0, 0x0, {0x2, r5}}, 0x70) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x2, 0x48b4, 0x0, 0x9, 0x6}, 0xffff6b2e) [ 1678.392428][T21233] can: request_module (can-proto-0) failed. 18:55:00 executing program 4: syz_clone(0x44043501, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:00 executing program 3: syz_clone(0x440403ce, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:00 executing program 2: syz_clone(0x44040304, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1678.516015][T21233] can: request_module (can-proto-0) failed. 18:55:00 executing program 1: syz_clone(0x440403c6, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1678.620980][T21233] can: request_module (can-proto-0) failed. [ 1678.729414][T21233] can: request_module (can-proto-0) failed. [ 1678.811107][T21233] can: request_module (can-proto-0) failed. 18:55:00 executing program 3: syz_clone(0x440403d2, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1678.913803][T21233] can: request_module (can-proto-0) failed. 18:55:00 executing program 4: syz_clone(0x44043800, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:00 executing program 5: socketpair(0x1d, 0x5, 0x0, &(0x7f0000000000)) syz_io_uring_complete(0x0) socketpair(0x1d, 0x5, 0x0, &(0x7f0000000000)) (async) syz_io_uring_complete(0x0) (async) [ 1679.032051][T21233] can: request_module (can-proto-0) failed. [ 1679.057513][T21233] can: request_module (can-proto-0) failed. 18:55:00 executing program 4: syz_clone(0x44043802, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:01 executing program 2: syz_clone(0x44043501, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:01 executing program 1: syz_clone(0x440403ce, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:01 executing program 4: syz_clone(0x44043c02, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:01 executing program 5: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x83d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa729}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x80) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80408}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, 0x0, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xd8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x52a8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x40}]}, 0x88}}, 0x80) 18:55:01 executing program 4: syz_clone(0x44043f00, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:01 executing program 5: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x83d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa729}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) (async) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80408}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, 0x0, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xd8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x52a8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x40}]}, 0x88}}, 0x80) 18:55:01 executing program 3: syz_clone(0x440403d6, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:01 executing program 4: syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:01 executing program 5: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x83d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa729}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x80) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) (async) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80408}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, 0x0, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xd8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x52a8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x40}]}, 0x88}}, 0x80) 18:55:01 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x40040) 18:55:01 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x40040) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) (async) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x40040) (async) 18:55:01 executing program 2: syz_clone(0x44043501, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:01 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x40040) 18:55:01 executing program 1: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x83d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa729}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x80) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80408}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, 0x0, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xd8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x52a8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x40}]}, 0x88}}, 0x80) 18:55:01 executing program 3: syz_clone(0x440403da, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:01 executing program 1: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x83d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa729}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x80) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80408}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, 0x0, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xd8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x52a8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x40}]}, 0x88}}, 0x80) 18:55:01 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000140)={0x3ec, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_NAT={0x2f8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}, @CTA_EXPECT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x40000}, 0xc) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_io_uring_complete(0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000040)=@default) 18:55:01 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000140)={0x3ec, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_NAT={0x2f8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}, @CTA_EXPECT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x40000}, 0xc) (async) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r1 = syz_io_uring_complete(0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000040)=@default) 18:55:01 executing program 1: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x83d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa729}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x80) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80408}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, 0x0, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xd8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x52a8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x40}]}, 0x88}}, 0x80) 18:55:01 executing program 4: syz_clone(0x44044100, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:01 executing program 2: syz_clone(0x44043501, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:01 executing program 1: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x83d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa729}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x80) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80408}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) 18:55:01 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000140)={0x3ec, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_NAT={0x2f8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}, @CTA_EXPECT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x40000}, 0xc) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r1 = syz_io_uring_complete(0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000040)=@default) 18:55:02 executing program 5: socketpair(0x8, 0x5, 0x6, &(0x7f0000000000)) 18:55:02 executing program 1: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x83d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa729}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x80) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80408}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) 18:55:02 executing program 3: syz_clone(0x440403f2, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:02 executing program 1: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x83d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa729}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x80) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 18:55:02 executing program 5: socketpair(0x8, 0x5, 0x6, &(0x7f0000000000)) socketpair(0x8, 0x5, 0x6, &(0x7f0000000000)) (async) 18:55:02 executing program 1: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x83d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa729}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x80) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) 18:55:02 executing program 5: socketpair(0x8, 0x5, 0x6, &(0x7f0000000000)) 18:55:02 executing program 1: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x83d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa729}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x80) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) 18:55:02 executing program 4: syz_clone(0x44045602, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:02 executing program 5: socketpair(0x2c, 0x2, 0xdff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x302, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x800, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x240040d0}, 0x1) 18:55:02 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:02 executing program 3: syz_clone(0x440403f4, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:02 executing program 1: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x83d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa729}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x80) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) 18:55:02 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:02 executing program 1: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x83d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa729}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x80) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) 18:55:02 executing program 5: socketpair(0x2c, 0x2, 0xdff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x302, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x0) (rerun: 64) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x800, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x240040d0}, 0x1) 18:55:02 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:02 executing program 1: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x83d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa729}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x80) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) 18:55:02 executing program 4: syz_clone(0x44045803, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:02 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) 18:55:02 executing program 5: socketpair(0x2c, 0x2, 0xdff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x302, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x0) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x800, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x240040d0}, 0x1) 18:55:02 executing program 4: syz_clone(0x44045c00, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:03 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) 18:55:03 executing program 3: syz_clone(0x440403f6, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:03 executing program 4: syz_clone(0x44046202, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:03 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x482d40, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xd}, @void, @val={0xc, 0x99, {0x7fff, 0x2b}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) socketpair(0x26, 0x1, 0x7, &(0x7f0000000000)) 18:55:03 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) 18:55:03 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) 18:55:03 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x482d40, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xd}, @void, @val={0xc, 0x99, {0x7fff, 0x2b}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) socketpair(0x26, 0x1, 0x7, &(0x7f0000000000)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x482d40, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xd}, @void, @val={0xc, 0x99, {0x7fff, 0x2b}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) socketpair(0x26, 0x1, 0x7, &(0x7f0000000000)) (async) 18:55:03 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) 18:55:03 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x482d40, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xd}, @void, @val={0xc, 0x99, {0x7fff, 0x2b}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) socketpair(0x26, 0x1, 0x7, &(0x7f0000000000)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x482d40, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xd}, @void, @val={0xc, 0x99, {0x7fff, 0x2b}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) socketpair(0x26, 0x1, 0x7, &(0x7f0000000000)) (async) 18:55:03 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) 18:55:03 executing program 5: syz_clone(0x440403f4, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:03 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) 18:55:03 executing program 3: syz_clone(0x440403fa, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:03 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) 18:55:03 executing program 4: syz_clone(0x44046801, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:03 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 18:55:03 executing program 4: syz_clone(0x44046803, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:03 executing program 5: syz_clone(0x44045602, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:03 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 18:55:03 executing program 4: syz_clone(0x44046d00, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:03 executing program 3: syz_clone(0x440403fc, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:03 executing program 4: syz_clone(0x44047602, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:03 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 18:55:04 executing program 4: syz_clone(0x44048003, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:04 executing program 5: syz_clone(0x44045602, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:04 executing program 3: syz_clone(0x44040403, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:04 executing program 3: syz_clone(0x44040500, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:04 executing program 4: syz_clone(0x44048400, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:04 executing program 5: syz_clone(0x44045602, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:04 executing program 3: syz_clone(0x44040600, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:04 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:04 executing program 4: syz_clone(0x44048601, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:04 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:04 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:04 executing program 3: syz_clone(0x44040700, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:04 executing program 4: syz_clone(0x44048b02, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 4: syz_clone(0x44049a01, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 4: syz_clone(0x44049a03, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 4: syz_clone(0x4404a003, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 3: syz_clone(0x44040a00, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 3: syz_clone(0x44040e03, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 3: syz_clone(0x44041100, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 4: syz_clone(0x4404b602, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 3: syz_clone(0x44041a03, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 3: syz_clone(0x44041c01, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 4: syz_clone(0x4404bc03, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 3: syz_clone(0x44041e00, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 4: syz_clone(0x4404c000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 3: syz_clone(0x44041f00, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 3: syz_clone(0x44042000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 3: syz_clone(0x44042c01, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 3: syz_clone(0x44042e03, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 3: syz_clone(0x44043500, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 3: syz_clone(0x44043501, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 4: syz_clone(0x4404c202, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 3: syz_clone(0x44043800, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 3: syz_clone(0x44043a01, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 3: syz_clone(0x44043c02, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 3: syz_clone(0x44043f00, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 3: syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:05 executing program 4: syz_clone(0x4404c403, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:06 executing program 3: syz_clone(0x44044100, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:06 executing program 4: syz_clone(0x4404c603, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:06 executing program 4: syz_clone(0x4404c903, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:06 executing program 3: syz_clone(0x44044903, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:06 executing program 4: syz_clone(0x4404d003, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:06 executing program 3: syz_clone(0x44044e02, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:06 executing program 3: syz_clone(0x44045602, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:06 executing program 3: syz_clone(0x44045803, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:06 executing program 3: syz_clone(0x44045c00, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:06 executing program 3: syz_clone(0x44045c01, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:06 executing program 3: syz_clone(0x44046201, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:07 executing program 4: syz_clone(0x4404d602, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:07 executing program 3: syz_clone(0x44046202, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:07 executing program 4: syz_clone(0x4404d800, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:07 executing program 4: syz_clone(0x4404e000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:07 executing program 3: syz_clone(0x44046801, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:07 executing program 3: syz_clone(0x44046d00, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:07 executing program 3: syz_clone(0x44047602, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:08 executing program 4: syz_clone(0x4404e200, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:08 executing program 3: syz_clone(0x44048003, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:08 executing program 4: syz_clone(0x4404ec02, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:08 executing program 4: syz_clone(0x4404f000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:08 executing program 3: syz_clone(0x44048400, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:08 executing program 4: syz_clone(0x4404f403, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:09 executing program 3: syz_clone(0x44048601, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:09 executing program 4: syz_clone(0x4404f803, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:09 executing program 4: syz_clone(0x4404fa03, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:09 executing program 3: syz_clone(0x44048b02, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:09 executing program 3: syz_clone(0x44049001, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:09 executing program 4: syz_clone(0x4404fd01, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:09 executing program 4: syz_clone(0x44040000, 0x0, 0x2, 0x0, 0x0, 0x0) 18:55:09 executing program 4: syz_clone(0x44040000, 0x0, 0x4, 0x0, 0x0, 0x0) 18:55:09 executing program 3: syz_clone(0x44049600, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:09 executing program 4: syz_clone(0x44040000, 0x0, 0x7, 0x0, 0x0, 0x0) 18:55:09 executing program 3: syz_clone(0x44049a01, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:09 executing program 4: syz_clone(0x44040000, 0x0, 0x8, 0x0, 0x0, 0x0) 18:55:09 executing program 3: syz_clone(0x44049a03, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:10 executing program 3: syz_clone(0x44049c03, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:10 executing program 3: syz_clone(0x4404a003, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:10 executing program 4: syz_clone(0x44040000, 0x0, 0x10, 0x0, 0x0, 0x0) 18:55:10 executing program 3: syz_clone(0x4404ae02, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:10 executing program 4: syz_clone(0x44040000, 0x0, 0x11, 0x0, 0x0, 0x0) 18:55:10 executing program 3: syz_clone(0x4404b602, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:10 executing program 4: syz_clone(0x44040000, 0x0, 0x1e, 0x0, 0x0, 0x0) 18:55:10 executing program 3: syz_clone(0x4404bc00, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:10 executing program 3: syz_clone(0x4404c202, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:10 executing program 4: syz_clone(0x44040000, 0x0, 0x24, 0x0, 0x0, 0x0) 18:55:10 executing program 4: syz_clone(0x44040000, 0x0, 0x35, 0x0, 0x0, 0x0) 18:55:10 executing program 4: syz_clone(0x44040000, 0x0, 0x38, 0x0, 0x0, 0x0) 18:55:10 executing program 3: syz_clone(0x4404c403, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:11 executing program 4: syz_clone(0x44040000, 0x0, 0x41, 0x0, 0x0, 0x0) 18:55:11 executing program 4: syz_clone(0x44040000, 0x0, 0x5c, 0x0, 0x0, 0x0) 18:55:11 executing program 3: syz_clone(0x4404c603, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:11 executing program 4: syz_clone(0x44040000, 0x0, 0x6d, 0x0, 0x0, 0x0) 18:55:11 executing program 4: syz_clone(0x44040000, 0x0, 0x84, 0x0, 0x0, 0x0) 18:55:11 executing program 3: syz_clone(0x4404c903, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:11 executing program 3: syz_clone(0x4404ce03, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:11 executing program 3: syz_clone(0x4404d203, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:11 executing program 4: syz_clone(0x44040000, 0x0, 0xc0, 0x0, 0x0, 0x0) 18:55:12 executing program 3: syz_clone(0x4404d602, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:12 executing program 4: syz_clone(0x44040000, 0x0, 0xd8, 0x0, 0x0, 0x0) 18:55:12 executing program 3: syz_clone(0x4404d603, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:12 executing program 4: syz_clone(0x44040000, 0x0, 0xe0, 0x0, 0x0, 0x0) 18:55:12 executing program 3: syz_clone(0x4404d800, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:12 executing program 3: syz_clone(0x4404da03, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:12 executing program 4: syz_clone(0x44040000, 0x0, 0xe2, 0x0, 0x0, 0x0) 18:55:12 executing program 3: syz_clone(0x4404e000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:12 executing program 4: syz_clone(0x44040000, 0x0, 0xf0, 0x0, 0x0, 0x0) 18:55:12 executing program 3: syz_clone(0x4404e200, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:12 executing program 4: syz_clone(0x44040000, 0x0, 0x11c, 0x0, 0x0, 0x0) 18:55:13 executing program 4: syz_clone(0x44040000, 0x0, 0x12c, 0x0, 0x0, 0x0) 18:55:13 executing program 4: syz_clone(0x44040000, 0x0, 0x135, 0x0, 0x0, 0x0) 18:55:13 executing program 3: syz_clone(0x4404ec02, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:13 executing program 3: syz_clone(0x4404f000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:13 executing program 4: syz_clone(0x44040000, 0x0, 0x168, 0x0, 0x0, 0x0) 18:55:13 executing program 3: syz_clone(0x4404f203, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:13 executing program 4: syz_clone(0x44040000, 0x0, 0x186, 0x0, 0x0, 0x0) 18:55:13 executing program 3: syz_clone(0x4404f403, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:14 executing program 4: syz_clone(0x44040000, 0x0, 0x19a, 0x0, 0x0, 0x0) 18:55:14 executing program 3: syz_clone(0x4404f603, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:14 executing program 4: syz_clone(0x44040000, 0x0, 0x1fd, 0x0, 0x0, 0x0) 18:55:14 executing program 3: syz_clone(0x4404fa03, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:14 executing program 4: syz_clone(0x44040000, 0x0, 0x234, 0x0, 0x0, 0x0) 18:55:14 executing program 3: syz_clone(0x4404fc03, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:14 executing program 3: syz_clone(0x4404fd01, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:14 executing program 4: syz_clone(0x44040000, 0x0, 0x238, 0x0, 0x0, 0x0) 18:55:14 executing program 3: syz_clone(0x44040000, 0x0, 0x2, 0x0, 0x0, 0x0) 18:55:14 executing program 3: syz_clone(0x44040000, 0x0, 0x3, 0x0, 0x0, 0x0) 18:55:14 executing program 4: syz_clone(0x44040000, 0x0, 0x23c, 0x0, 0x0, 0x0) 18:55:14 executing program 3: syz_clone(0x44040000, 0x0, 0x4, 0x0, 0x0, 0x0) 18:55:15 executing program 4: syz_clone(0x44040000, 0x0, 0x256, 0x0, 0x0, 0x0) 18:55:15 executing program 3: syz_clone(0x44040000, 0x0, 0x5, 0x0, 0x0, 0x0) 18:55:15 executing program 4: syz_clone(0x44040000, 0x0, 0x262, 0x0, 0x0, 0x0) 18:55:15 executing program 3: syz_clone(0x44040000, 0x0, 0x6, 0x0, 0x0, 0x0) 18:55:15 executing program 4: syz_clone(0x44040000, 0x0, 0x276, 0x0, 0x0, 0x0) 18:55:15 executing program 3: syz_clone(0x44040000, 0x0, 0x7, 0x0, 0x0, 0x0) 18:55:15 executing program 4: syz_clone(0x44040000, 0x0, 0x28b, 0x0, 0x0, 0x0) 18:55:15 executing program 4: syz_clone(0x44040000, 0x0, 0x2b6, 0x0, 0x0, 0x0) 18:55:15 executing program 3: syz_clone(0x44040000, 0x0, 0x8, 0x0, 0x0, 0x0) 18:55:15 executing program 4: syz_clone(0x44040000, 0x0, 0x2c2, 0x0, 0x0, 0x0) 18:55:15 executing program 3: syz_clone(0x44040000, 0x0, 0xa, 0x0, 0x0, 0x0) 18:55:15 executing program 4: syz_clone(0x44040000, 0x0, 0x2d6, 0x0, 0x0, 0x0) 18:55:15 executing program 3: syz_clone(0x44040000, 0x0, 0x10, 0x0, 0x0, 0x0) 18:55:15 executing program 4: syz_clone(0x44040000, 0x0, 0x2ec, 0x0, 0x0, 0x0) 18:55:15 executing program 3: syz_clone(0x44040000, 0x0, 0x11, 0x0, 0x0, 0x0) 18:55:15 executing program 4: syz_clone(0x44040000, 0x0, 0x308, 0x0, 0x0, 0x0) 18:55:16 executing program 3: syz_clone(0x44040000, 0x0, 0x1e, 0x0, 0x0, 0x0) 18:55:16 executing program 4: syz_clone(0x44040000, 0x0, 0x30e, 0x0, 0x0, 0x0) 18:55:16 executing program 3: syz_clone(0x44040000, 0x0, 0x35, 0x0, 0x0, 0x0) 18:55:16 executing program 4: syz_clone(0x44040000, 0x0, 0x32e, 0x0, 0x0, 0x0) 18:55:16 executing program 3: syz_clone(0x44040000, 0x0, 0x38, 0x0, 0x0, 0x0) 18:55:16 executing program 4: syz_clone(0x44040000, 0x0, 0x358, 0x0, 0x0, 0x0) 18:55:16 executing program 3: syz_clone(0x44040000, 0x0, 0x41, 0x0, 0x0, 0x0) 18:55:16 executing program 4: syz_clone(0x44040000, 0x0, 0x368, 0x0, 0x0, 0x0) 18:55:16 executing program 3: syz_clone(0x44040000, 0x0, 0x5c, 0x0, 0x0, 0x0) 18:55:16 executing program 4: syz_clone(0x44040000, 0x0, 0x380, 0x0, 0x0, 0x0) 18:55:16 executing program 3: syz_clone(0x44040000, 0x0, 0x6d, 0x0, 0x0, 0x0) 18:55:16 executing program 4: syz_clone(0x44040000, 0x0, 0x39a, 0x0, 0x0, 0x0) 18:55:16 executing program 3: syz_clone(0x44040000, 0x0, 0x84, 0x0, 0x0, 0x0) 18:55:16 executing program 4: syz_clone(0x44040000, 0x0, 0x3a0, 0x0, 0x0, 0x0) 18:55:16 executing program 3: syz_clone(0x44040000, 0x0, 0x96, 0x0, 0x0, 0x0) 18:55:16 executing program 4: syz_clone(0x44040000, 0x0, 0x3bc, 0x0, 0x0, 0x0) 18:55:17 executing program 3: syz_clone(0x44040000, 0x0, 0xbc, 0x0, 0x0, 0x0) 18:55:17 executing program 4: syz_clone(0x44040000, 0x0, 0x3c4, 0x0, 0x0, 0x0) 18:55:17 executing program 4: syz_clone(0x44040000, 0x0, 0x3c6, 0x0, 0x0, 0x0) 18:55:17 executing program 3: syz_clone(0x44040000, 0x0, 0xd8, 0x0, 0x0, 0x0) 18:55:17 executing program 4: syz_clone(0x44040000, 0x0, 0x3c9, 0x0, 0x0, 0x0) 18:55:17 executing program 3: syz_clone(0x44040000, 0x0, 0xe0, 0x0, 0x0, 0x0) 18:55:17 executing program 4: syz_clone(0x44040000, 0x0, 0x3d0, 0x0, 0x0, 0x0) 18:55:17 executing program 3: syz_clone(0x44040000, 0x0, 0xe2, 0x0, 0x0, 0x0) 18:55:17 executing program 4: syz_clone(0x44040000, 0x0, 0x3f4, 0x0, 0x0, 0x0) 18:55:17 executing program 3: syz_clone(0x44040000, 0x0, 0xf0, 0x0, 0x0, 0x0) 18:55:17 executing program 4: syz_clone(0x44040000, 0x0, 0x3f8, 0x0, 0x0, 0x0) 18:55:17 executing program 3: syz_clone(0x44040000, 0x0, 0x11c, 0x0, 0x0, 0x0) 18:55:17 executing program 4: syz_clone(0x44040000, 0x0, 0x3fa, 0x0, 0x0, 0x0) 18:55:18 executing program 3: syz_clone(0x44040000, 0x0, 0x12c, 0x0, 0x0, 0x0) 18:55:18 executing program 4: syz_clone(0x44040000, 0x0, 0x500, 0x0, 0x0, 0x0) 18:55:18 executing program 3: syz_clone(0x44040000, 0x0, 0x135, 0x0, 0x0, 0x0) 18:55:18 executing program 4: syz_clone(0x44040000, 0x0, 0x700, 0x0, 0x0, 0x0) 18:55:19 executing program 3: syz_clone(0x44040000, 0x0, 0x13a, 0x0, 0x0, 0x0) 18:55:19 executing program 4: syz_clone(0x44040000, 0x0, 0x803, 0x0, 0x0, 0x0) 18:55:19 executing program 3: syz_clone(0x44040000, 0x0, 0x15c, 0x0, 0x0, 0x0) 18:55:19 executing program 4: syz_clone(0x44040000, 0x0, 0xe03, 0x0, 0x0, 0x0) 18:55:19 executing program 3: syz_clone(0x44040000, 0x0, 0x162, 0x0, 0x0, 0x0) 18:55:20 executing program 4: syz_clone(0x44040000, 0x0, 0x1100, 0x0, 0x0, 0x0) 18:55:20 executing program 3: syz_clone(0x44040000, 0x0, 0x168, 0x0, 0x0, 0x0) 18:55:20 executing program 4: syz_clone(0x44040000, 0x0, 0x1c01, 0x0, 0x0, 0x0) 18:55:20 executing program 3: syz_clone(0x44040000, 0x0, 0x186, 0x0, 0x0, 0x0) 18:55:20 executing program 3: syz_clone(0x44040000, 0x0, 0x190, 0x0, 0x0, 0x0) 18:55:20 executing program 4: syz_clone(0x44040000, 0x0, 0x1e00, 0x0, 0x0, 0x0) 18:55:21 executing program 3: syz_clone(0x44040000, 0x0, 0x19a, 0x0, 0x0, 0x0) 18:55:21 executing program 4: syz_clone(0x44040000, 0x0, 0x1f00, 0x0, 0x0, 0x0) 18:55:21 executing program 3: syz_clone(0x44040000, 0x0, 0x1fd, 0x0, 0x0, 0x0) 18:55:21 executing program 4: syz_clone(0x44040000, 0x0, 0x2000, 0x0, 0x0, 0x0) 18:55:21 executing program 3: syz_clone(0x44040000, 0x0, 0x23c, 0x0, 0x0, 0x0) 18:55:21 executing program 0: syz_clone(0x44040000, 0x0, 0x1fd, 0x0, 0x0, 0x0) 18:55:21 executing program 2: syz_clone(0x44040000, 0x0, 0x186, 0x0, 0x0, 0x0) 18:55:21 executing program 1: syz_clone(0x44040000, 0x0, 0x168, 0x0, 0x0, 0x0) 18:55:21 executing program 5: syz_clone(0x44040000, 0x0, 0x1100, 0x0, 0x0, 0x0) 18:55:21 executing program 4: syz_clone(0x44040000, 0x0, 0x2400, 0x0, 0x0, 0x0) 18:55:21 executing program 3: syz_clone(0x44040000, 0x0, 0x24e, 0x0, 0x0, 0x0) 18:55:22 executing program 2: syz_clone(0x44040000, 0x0, 0x162, 0x0, 0x0, 0x0) 18:55:22 executing program 1: syz_clone(0x44040000, 0x0, 0x700, 0x0, 0x0, 0x0) 18:55:22 executing program 4: syz_clone(0x44040000, 0x0, 0x2c01, 0x0, 0x0, 0x0) 18:55:22 executing program 5: syz_clone(0x44040000, 0x0, 0x2400, 0x0, 0x0, 0x0) 18:55:22 executing program 0: syz_clone(0x44040000, 0x0, 0x11c, 0x0, 0x0, 0x0) 18:55:22 executing program 3: syz_clone(0x44040000, 0x0, 0x256, 0x0, 0x0, 0x0) 18:55:22 executing program 4: syz_clone(0x44040000, 0x0, 0x2e03, 0x0, 0x0, 0x0) 18:55:22 executing program 0: syz_clone(0x44040000, 0x0, 0x2c01, 0x0, 0x0, 0x0) 18:55:22 executing program 5: syz_clone(0x44040000, 0x0, 0x3f8, 0x0, 0x0, 0x0) 18:55:22 executing program 1: syz_clone(0x44040000, 0x0, 0xf0, 0x0, 0x0, 0x0) 18:55:22 executing program 3: syz_clone(0x44040000, 0x0, 0x262, 0x0, 0x0, 0x0) 18:55:22 executing program 2: syz_clone(0x44040000, 0x0, 0x3d0, 0x0, 0x0, 0x0) 18:55:22 executing program 4: syz_clone(0x44040000, 0x0, 0x3402, 0x0, 0x0, 0x0) 18:55:23 executing program 5: syz_clone(0x44040000, 0x0, 0x2e03, 0x0, 0x0, 0x0) 18:55:23 executing program 3: syz_clone(0x44040000, 0x0, 0x276, 0x0, 0x0, 0x0) 18:55:23 executing program 0: syz_clone(0x44040000, 0x0, 0x256, 0x0, 0x0, 0x0) 18:55:23 executing program 1: syz_clone(0x44040000, 0x0, 0x39a, 0x0, 0x0, 0x0) 18:55:23 executing program 2: syz_clone(0x44040000, 0x0, 0x5c, 0x0, 0x0, 0x0) 18:55:23 executing program 4: syz_clone(0x44040000, 0x0, 0x3500, 0x0, 0x0, 0x0) 18:55:23 executing program 5: syz_clone(0x44040000, 0x0, 0x2e03, 0x0, 0x0, 0x0) 18:55:23 executing program 3: syz_clone(0x44040000, 0x0, 0x28b, 0x0, 0x0, 0x0) 18:55:24 executing program 0: syz_clone(0x44040000, 0x0, 0x256, 0x0, 0x0, 0x0) 18:55:24 executing program 2: syz_clone(0x44040000, 0x0, 0x3402, 0x0, 0x0, 0x0) 18:55:24 executing program 4: syz_clone(0x44040000, 0x0, 0x3501, 0x0, 0x0, 0x0) 18:55:24 executing program 1: syz_clone(0x44040000, 0x0, 0x358, 0x0, 0x0, 0x0) 18:55:24 executing program 5: syz_clone(0x44040000, 0x0, 0x38, 0x0, 0x0, 0x0) 18:55:24 executing program 3: syz_clone(0x44040000, 0x0, 0x2ae, 0x0, 0x0, 0x0) 18:55:24 executing program 2: syz_clone(0x44040000, 0x0, 0x3402, 0x0, 0x0, 0x0) 18:55:24 executing program 4: syz_clone(0x44040000, 0x0, 0x3800, 0x0, 0x0, 0x0) 18:55:24 executing program 0: syz_clone(0x44040000, 0x0, 0x3501, 0x0, 0x0, 0x0) 18:55:24 executing program 1: syz_clone(0x44040000, 0x0, 0x32e, 0x0, 0x0, 0x0) 18:55:24 executing program 5: syz_clone(0x44040000, 0x0, 0x35, 0x0, 0x0, 0x0) 18:55:25 executing program 3: syz_clone(0x44040000, 0x0, 0x2b6, 0x0, 0x0, 0x0) 18:55:25 executing program 4: syz_clone(0x44040000, 0x0, 0x3802, 0x0, 0x0, 0x0) 18:55:25 executing program 2: syz_clone(0x44040000, 0x0, 0x1e, 0x0, 0x0, 0x0) 18:55:25 executing program 0: syz_clone(0x44040000, 0x0, 0x11, 0x0, 0x0, 0x0) 18:55:25 executing program 1: syz_clone(0x44040000, 0x0, 0xa, 0x0, 0x0, 0x0) 18:55:25 executing program 5: syz_clone(0x44040000, 0x0, 0x2c2, 0x0, 0x0, 0x0) 18:55:25 executing program 4: syz_clone(0x44040000, 0x0, 0x3c02, 0x0, 0x0, 0x0) 18:55:25 executing program 3: syz_clone(0x44040000, 0x0, 0x2c2, 0x0, 0x0, 0x0) 18:55:25 executing program 2: syz_clone(0x44040000, 0x0, 0x3802, 0x0, 0x0, 0x0) 18:55:25 executing program 1: syz_clone(0x44040000, 0x0, 0x2b6, 0x0, 0x0, 0x0) 18:55:25 executing program 0: syz_clone(0x44040000, 0x0, 0x28b, 0x0, 0x0, 0x0) 18:55:26 executing program 5: syz_clone(0x44040000, 0x0, 0x276, 0x0, 0x0, 0x0) 18:55:26 executing program 4: syz_clone(0x44040000, 0x0, 0x3f00, 0x0, 0x0, 0x0) 18:55:26 executing program 3: syz_clone(0x44040000, 0x0, 0x2d6, 0x0, 0x0, 0x0) 18:55:26 executing program 2: syz_clone(0x44040000, 0x0, 0x2c2, 0x0, 0x0, 0x0) 18:55:26 executing program 1: syz_clone(0x44040000, 0x0, 0x3c02, 0x0, 0x0, 0x0) 18:55:26 executing program 0: syz_clone(0x44040000, 0x0, 0x5, 0x0, 0x0, 0x0) 18:55:26 executing program 4: syz_clone(0x44040000, 0x0, 0x4000, 0x0, 0x0, 0x0) 18:55:26 executing program 5: syz_clone(0x44040000, 0x0, 0x3f00, 0x0, 0x0, 0x0) 18:55:26 executing program 3: syz_clone(0x44040000, 0x0, 0x2ec, 0x0, 0x0, 0x0) 18:55:26 executing program 2: syz_clone(0x44040000, 0x0, 0x4, 0x0, 0x0, 0x0) 18:55:27 executing program 1: syz_clone(0x44040000, 0x0, 0x3, 0x0, 0x0, 0x0) 18:55:27 executing program 0: syz_clone(0x44040000, 0x0, 0x2, 0x0, 0x0, 0x0) 18:55:27 executing program 5: syz_clone(0x4404f603, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:27 executing program 4: syz_clone(0x44040000, 0x0, 0x4100, 0x0, 0x0, 0x0) 18:55:27 executing program 3: syz_clone(0x44040000, 0x0, 0x300, 0x0, 0x0, 0x0) 18:55:27 executing program 2: syz_clone(0x4404f403, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:27 executing program 1: syz_clone(0x44040000, 0x0, 0x168, 0x0, 0x0, 0x0) 18:55:27 executing program 4: syz_clone(0x44040000, 0x0, 0x5602, 0x0, 0x0, 0x0) 18:55:27 executing program 3: syz_clone(0x44040000, 0x0, 0x304, 0x0, 0x0, 0x0) 18:55:27 executing program 0: syz_clone(0x44040000, 0x0, 0x2, 0x0, 0x0, 0x0) 18:55:27 executing program 5: syz_clone(0x44040000, 0x0, 0x300, 0x0, 0x0, 0x0) 18:55:28 executing program 2: syz_clone(0x44040000, 0x0, 0x4100, 0x0, 0x0, 0x0) 18:55:28 executing program 1: syz_clone(0x4404f000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:28 executing program 4: syz_clone(0x44040000, 0x0, 0x5803, 0x0, 0x0, 0x0) 18:55:28 executing program 3: syz_clone(0x44040000, 0x0, 0x30e, 0x0, 0x0, 0x0) 18:55:28 executing program 0: syz_clone(0x44040000, 0x0, 0x304, 0x0, 0x0, 0x0) 18:55:28 executing program 5: syz_clone(0x44040000, 0x0, 0x5602, 0x0, 0x0, 0x0) 18:55:28 executing program 2: syz_clone(0x44040000, 0x0, 0x12c, 0x0, 0x0, 0x0) 18:55:28 executing program 1: syz_clone(0x4404d602, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:29 executing program 4: syz_clone(0x44040000, 0x0, 0x5c00, 0x0, 0x0, 0x0) 18:55:29 executing program 3: syz_clone(0x44040000, 0x0, 0x31a, 0x0, 0x0, 0x0) 18:55:29 executing program 0: syz_clone(0x44040000, 0x0, 0x304, 0x0, 0x0, 0x0) 18:55:29 executing program 5: syz_clone(0x44040000, 0x0, 0xc0, 0x0, 0x0, 0x0) 18:55:29 executing program 2: syz_clone(0x44040000, 0x0, 0x41, 0x0, 0x0, 0x0) 18:55:29 executing program 4: syz_clone(0x44040000, 0x0, 0x6202, 0x0, 0x0, 0x0) 18:55:29 executing program 3: syz_clone(0x44040000, 0x0, 0x32e, 0x0, 0x0, 0x0) 18:55:29 executing program 1: syz_clone(0x44040000, 0x0, 0x31a, 0x0, 0x0, 0x0) 18:55:29 executing program 2: syz_clone(0x44040000, 0x0, 0x5c00, 0x0, 0x0, 0x0) 18:55:29 executing program 5: syz_clone(0x4404c202, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:29 executing program 4: syz_clone(0x44040000, 0x0, 0x6801, 0x0, 0x0, 0x0) 18:55:29 executing program 0: syz_clone(0x44040000, 0x0, 0x35, 0x0, 0x0, 0x0) 18:55:30 executing program 3: syz_clone(0x44040000, 0x0, 0x349, 0x0, 0x0, 0x0) 18:55:30 executing program 1: syz_clone(0x44040000, 0x0, 0x24, 0x0, 0x0, 0x0) 18:55:30 executing program 2: syz_clone(0x4404b602, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:30 executing program 0: syz_clone(0x4404a003, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:30 executing program 4: syz_clone(0x44040000, 0x0, 0x6803, 0x0, 0x0, 0x0) 18:55:30 executing program 3: syz_clone(0x44040000, 0x0, 0x358, 0x0, 0x0, 0x0) 18:55:30 executing program 5: syz_clone(0x4404c202, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:31 executing program 2: syz_clone(0x44040000, 0x0, 0x6801, 0x0, 0x0, 0x0) 18:55:31 executing program 1: syz_clone(0x44040000, 0x0, 0x7, 0x0, 0x0, 0x0) 18:55:31 executing program 4: syz_clone(0x44040000, 0x0, 0x6d00, 0x0, 0x0, 0x0) 18:55:31 executing program 0: syz_clone(0x44040000, 0x0, 0x6803, 0x0, 0x0, 0x0) 18:55:31 executing program 3: syz_clone(0x44040000, 0x0, 0x380, 0x0, 0x0, 0x0) 18:55:31 executing program 2: syz_clone(0x44040000, 0x0, 0x358, 0x0, 0x0, 0x0) 18:55:31 executing program 1: syz_clone(0x44049600, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:31 executing program 5: syz_clone(0x4404c202, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:32 executing program 4: syz_clone(0x44040000, 0x0, 0x7602, 0x0, 0x0, 0x0) 18:55:32 executing program 3: syz_clone(0x44040000, 0x0, 0x39a, 0x0, 0x0, 0x0) 18:55:32 executing program 0: syz_clone(0x44040000, 0x0, 0x380, 0x0, 0x0, 0x0) 18:55:32 executing program 1: syz_clone(0x44040000, 0x0, 0x2, 0x0, 0x0, 0x0) 18:55:32 executing program 2: syz_clone(0x4404d602, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:32 executing program 4: syz_clone(0x44040000, 0x0, 0x8003, 0x0, 0x0, 0x0) 18:55:32 executing program 3: syz_clone(0x44040000, 0x0, 0x39c, 0x0, 0x0, 0x0) 18:55:32 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:32 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:32 executing program 0: syz_clone(0x44040000, 0x0, 0x39a, 0x0, 0x0, 0x0) 18:55:32 executing program 4: syz_clone(0x44040000, 0x0, 0x8400, 0x0, 0x0, 0x0) 18:55:32 executing program 2: syz_clone(0x44045602, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:33 executing program 1: syz_clone(0x44044100, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:33 executing program 3: syz_clone(0x44040000, 0x0, 0x3a0, 0x0, 0x0, 0x0) 18:55:33 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:33 executing program 4: syz_clone(0x44040000, 0x0, 0x8601, 0x0, 0x0, 0x0) 18:55:33 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:33 executing program 5: syz_clone(0x4404c403, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:33 executing program 3: syz_clone(0x44040000, 0x0, 0x3c4, 0x0, 0x0, 0x0) 18:55:33 executing program 2: syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:33 executing program 0: syz_clone(0x44043501, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:33 executing program 1: syz_clone(0x44044100, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:33 executing program 4: syz_clone(0x44040000, 0x0, 0x8b02, 0x0, 0x0, 0x0) 18:55:34 executing program 3: syz_clone(0x44040000, 0x0, 0x3c6, 0x0, 0x0, 0x0) 18:55:34 executing program 5: syz_clone(0x44040000, 0x0, 0x3c4, 0x0, 0x0, 0x0) 18:55:34 executing program 2: syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:34 executing program 0: syz_clone(0x44040000, 0x0, 0x8601, 0x0, 0x0, 0x0) 18:55:34 executing program 1: syz_clone(0x44044100, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:34 executing program 3: syz_clone(0x44040000, 0x0, 0x3c9, 0x0, 0x0, 0x0) 18:55:34 executing program 4: syz_clone(0x44040000, 0x0, 0x9a01, 0x0, 0x0, 0x0) 18:55:34 executing program 5: syz_clone(0x44048601, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:34 executing program 4: syz_clone(0x44040000, 0x0, 0x9a03, 0x0, 0x0, 0x0) 18:55:34 executing program 0: syz_clone(0x44040000, 0x0, 0x9a01, 0x0, 0x0, 0x0) 18:55:34 executing program 2: syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:34 executing program 3: syz_clone(0x44040000, 0x0, 0x3ce, 0x0, 0x0, 0x0) 18:55:35 executing program 5: syz_clone(0x44040000, 0x0, 0x3c9, 0x0, 0x0, 0x0) 18:55:35 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:35 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:35 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:35 executing program 4: syz_clone(0x44040000, 0x0, 0xa003, 0x0, 0x0, 0x0) 18:55:35 executing program 3: syz_clone(0x44040000, 0x0, 0x3d2, 0x0, 0x0, 0x0) 18:55:35 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:35 executing program 0: syz_clone(0x44040600, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:35 executing program 5: syz_clone(0x44048003, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:35 executing program 2: syz_clone(0x440403fc, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:35 executing program 1: syz_clone(0x44047602, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:35 executing program 4: syz_clone(0x44040000, 0x0, 0xa08b, 0x0, 0x0, 0x0) 18:55:35 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) 18:55:35 executing program 3: syz_clone(0x44040000, 0x0, 0x3d6, 0x0, 0x0, 0x0) 18:55:35 executing program 0: syz_clone(0x44040000, 0x0, 0x3d2, 0x0, 0x0, 0x0) 18:55:36 executing program 4: syz_clone(0x44040000, 0x0, 0xb602, 0x0, 0x0, 0x0) 18:55:36 executing program 5: syz_clone(0x44040000, 0x0, 0xa08b, 0x0, 0x0, 0x0) 18:55:36 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:36 executing program 1: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x83d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa729}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x80) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 18:55:36 executing program 1: sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x83d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa729}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x80) socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80408}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) 18:55:36 executing program 2: syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:36 executing program 3: syz_clone(0x44040000, 0x0, 0x3da, 0x0, 0x0, 0x0) 18:55:36 executing program 1: syz_clone(0x44040000, 0x0, 0x3d6, 0x0, 0x0, 0x0) 18:55:36 executing program 4: syz_clone(0x44040000, 0x0, 0xbc03, 0x0, 0x0, 0x0) 18:55:36 executing program 0: syz_clone(0x440403d6, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:36 executing program 5: syz_clone(0x44040300, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:36 executing program 3: syz_clone(0x44040000, 0x0, 0x3f2, 0x0, 0x0, 0x0) 18:55:36 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair(0x1f, 0x800, 0x7ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$rose(r2, &(0x7f0000001200)="dbbd38ca2655ca311580ed533a46763b0ea83eb60bcfab293b934e49f4aed7f54db755cfa9e53d65b51ec3e794b05b32bbcebbea065073c6f1e67dc5c113113759cc220e118db59b57942dd5241a97", 0x4f, 0x2000000, &(0x7f0000001140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40) syz_io_uring_setup(0xfe8, &(0x7f0000000300)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)=0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000010c0), 0x3, 0x2) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000001100)={0x1, {0xffffffff, 0x8, 0x6, 0x3}, {0x1ff, 0x7, 0x2, 0x2}, {0x7, 0xfffffff9}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@cb_func]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) syz_io_uring_complete(r3) syz_io_uring_setup(0x4cd6, &(0x7f0000000480)={0x0, 0xd3a3, 0x10, 0x0, 0x312}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000500), &(0x7f0000000540)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000600)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r2, 0x80, &(0x7f0000000580)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x1000) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @link_local, 'dummy0\x00'}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)="38ad4534b805d6f9cad100ad5a7f5168d8202ffc931687452c49919d3bab85ca21f5a208647b085b6f04a26b1a6167b1cd20dc162869462f60ce7915811394d5685115cab6239a9f6c0745ae965999f7ff411b7f9c0ff8c50dd440779481b5a4e82ad5b7a2b00ac1aba821086ba10026f6570bcf0d53565533e165f1c8a54224e04f3e0dcd96ad91351695d0abde0586aa344837bef2e952e2b998938cd6aebd4b0bd35fe48a22fb600a2e3d9f13a91127d5d16a32c0b7", 0xb7}, {&(0x7f0000000200)="9d85cdff34b5dde75740719ac64b58b515e181995b5178fb82ad3bfe55549a92bed6ede4ee7611e1f3490fdd63984ff96e849f354eea59989de26624898cfecdf14e8e23f0b53edc6fa09c304f95395e3a049a863754e5d9031671e17a2339b72d92b529069bd850a01437e0c2ab64e67d51804de08cf834a585a43095b5d896e6510da46e20f7285b8bbabbb48f8a9cda5c11b4ac2139b93244786a569c7bbbdfd2b95a0d3045e1407235ac2f600eb5d06eca51f4ad896b8b0284bb55", 0xbd}, {&(0x7f00000002c0)="5adab0b59b8850a0", 0x8}], 0x3, &(0x7f0000000340)=[{0x30, 0x110, 0x401, "e9637bb01569d7f884646796fcb51ce5c2bfa84e577041a94fa187d10bd22e"}, {0xb8, 0x6, 0x3, "8ce742b376e27358930d7042ea00ce0d5127983791cd2aa487739a61f25cc9d35a35600e2de3b602def980012bf4aa89aab378d41eb02bb3ba6e7488c16b24ad0eb04bf3c630b040c74f24e652c09321ea9145502d93cad085f95fe803f86389fd1e657f97b854526db7592ea225b99d81a6183bcbe36fd5db9b9919a4cdc1a62b708ad93f7ae4fb77c965c9931a68ece685da63e43b99974fcdca166d37c8e72db0f97d"}], 0xe8}, 0x4040004) socket$packet(0x11, 0x3, 0x300) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001380)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001780)={&(0x7f00000013c0)={0x39c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9d87}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x8c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x39c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040044) ioctl$FBIOPUT_CON2FBMAP(r7, 0x4610, &(0x7f0000001280)={0x1c, 0x1}) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:55:36 executing program 2: syz_clone(0x440402d6, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:37 executing program 1: syz_clone(0x440403a0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:44 executing program 4: syz_clone(0x44040000, 0x0, 0xc000, 0x0, 0x0, 0x0) 18:55:44 executing program 2: syz_clone(0x440402d6, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:44 executing program 5: syz_clone(0x44040300, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:44 executing program 0: syz_clone(0x440403d6, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:46 executing program 1: syz_clone(0x440403a0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:46 executing program 3: syz_clone(0x44040000, 0x0, 0x3f4, 0x0, 0x0, 0x0) 18:55:47 executing program 1: syz_clone(0x44040000, 0x0, 0x3f2, 0x0, 0x0, 0x0) 18:55:47 executing program 3: syz_clone(0x44040000, 0x0, 0x3f6, 0x0, 0x0, 0x0) 18:55:47 executing program 3: syz_clone(0x44040000, 0x0, 0x3fa, 0x0, 0x0, 0x0) 18:55:47 executing program 1: syz_clone(0x44040000, 0x0, 0x3f4, 0x0, 0x0, 0x0) 18:55:48 executing program 3: syz_clone(0x44040000, 0x0, 0x3fc, 0x0, 0x0, 0x0) 18:55:48 executing program 1: syz_clone(0x440402c2, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:51 executing program 4: syz_clone(0x44040000, 0x0, 0xc202, 0x0, 0x0, 0x0) 18:55:51 executing program 2: syz_clone(0x440402d6, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:51 executing program 3: syz_clone(0x44040000, 0x0, 0x403, 0x0, 0x0, 0x0) 18:55:51 executing program 1: syz_clone(0x4404039a, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:51 executing program 5: syz_clone(0x44040300, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:51 executing program 0: syz_clone(0x440403d6, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:51 executing program 3: syz_clone(0x44040000, 0x0, 0x500, 0x0, 0x0, 0x0) 18:55:51 executing program 1: syz_clone(0x44040380, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:51 executing program 4: syz_clone(0x44040000, 0x0, 0xc403, 0x0, 0x0, 0x0) 18:55:51 executing program 0: syz_clone(0x44040368, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1729.984653][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.984707][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 18:55:51 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r1, 0x7aa, &(0x7f0000000200)={{@host, 0x10001}, 0xfff, 0x4}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r2, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f0000000180)=0x1) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000001c0)={{@local, 0xff}, 0x1f, 0x4, 0x8c6f, 0x701, 0x9, 0xd0, 0x8, 0x7d}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) setsockopt$rose(r4, 0x104, 0x4, 0x0, 0x0) 18:55:51 executing program 2: syz_clone(0x44040276, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:52 executing program 5: syz_clone(0x44040262, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:52 executing program 3: syz_clone(0x44040000, 0x0, 0x600, 0x0, 0x0, 0x0) 18:55:52 executing program 4: syz_clone(0x44040000, 0x0, 0xc603, 0x0, 0x0, 0x0) 18:55:52 executing program 1: syz_clone(0x44040000, 0x0, 0xc403, 0x0, 0x0, 0x0) 18:55:52 executing program 2: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xff, 0x76}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3d28f2b2f5785f8aa0afe89d60"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "02e3d1e15c"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20064044}, 0xc011) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r0, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x94}, 0x81) 18:55:52 executing program 0: syz_clone(0x44040256, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:52 executing program 5: syz_clone(0x4404030e, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:52 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) socket$key(0xf, 0x3, 0x2) setsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000040)=0xfffffff7, 0x4) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000080)=0x7f) 18:55:52 executing program 4: syz_clone(0x44040000, 0x0, 0xc903, 0x0, 0x0, 0x0) 18:55:52 executing program 2: syz_clone(0x440402ec, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:52 executing program 3: syz_clone(0x44040000, 0x0, 0x700, 0x0, 0x0, 0x0) 18:55:52 executing program 1: syz_clone(0x4404023c, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:53 executing program 5: syz_clone(0x440402d6, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:53 executing program 0: syz_clone(0x440401fd, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:53 executing program 4: syz_clone(0x44040000, 0x0, 0xd003, 0x0, 0x0, 0x0) 18:55:53 executing program 3: syz_clone(0x44040000, 0x0, 0xa00, 0x0, 0x0, 0x0) 18:55:53 executing program 2: syz_clone(0x44040000, 0x0, 0x700, 0x0, 0x0, 0x0) 18:55:53 executing program 1: syz_clone(0x44040000, 0x0, 0xc903, 0x0, 0x0, 0x0) 18:55:53 executing program 5: syz_clone(0x440402d6, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:53 executing program 4: syz_clone(0x44040000, 0x0, 0xd602, 0x0, 0x0, 0x0) 18:55:53 executing program 2: syz_clone(0x44040000, 0x0, 0xd003, 0x0, 0x0, 0x0) 18:55:53 executing program 0: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0x79}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x24, 0x34, @random="d685c71331cd9c63a0559e390b5f295d5af8d44da6b4b01a2c33d6d9cb06268f"}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) 18:55:53 executing program 3: syz_clone(0x44040000, 0x0, 0xe03, 0x0, 0x0, 0x0) 18:55:53 executing program 0: syz_clone(0x4404019a, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:53 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) r6 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x178, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1f, 0x6a}}}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random="a7bd"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x46}]}, @NL80211_ATTR_IE={0x11b, 0x2a, [@perr={0x84, 0x115, {0x0, 0x11, [@ext={{}, @broadcast, 0x0, @device_a, 0x3e}, @not_ext={{}, @device_b, 0x1, "", 0x34}, @not_ext={{}, @broadcast, 0xcc8, "", 0x22}, @ext={{}, @broadcast, 0x6, @broadcast, 0x10}, @ext={{}, @broadcast, 0x9, @device_a, 0x40}, @not_ext={{}, @device_b, 0x9, "", 0x1c}, @not_ext={{}, @broadcast, 0x800, "", 0x3a}, @ext={{}, @device_a, 0x5, @device_a, 0x1d}, @ext={{}, @device_b, 0x4, @broadcast, 0x2e}, @not_ext={{}, @device_b, 0xfffffff8, "", 0x2b}, @not_ext={{}, @device_a, 0x8000, "", 0x1e}, @ext={{}, @device_a, 0x3, @device_b, 0x2b}, @ext={{}, @broadcast, 0x5f4, @device_a, 0x1f}, @not_ext={{}, @broadcast, 0x810e, "", 0xf}, @ext={{}, @device_a, 0x10001, @device_a, 0x18}, @ext={{}, @device_a, 0x8, @device_a, 0x17}, @not_ext={{}, @device_a, 0x1f6, "", 0x2e}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) setsockopt$rose(r3, 0x104, 0x4, &(0x7f0000000040)=0x3, 0x4) 18:55:54 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) r6 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x178, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1f, 0x6a}}}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random="a7bd"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x46}]}, @NL80211_ATTR_IE={0x11b, 0x2a, [@perr={0x84, 0x115, {0x0, 0x11, [@ext={{}, @broadcast, 0x0, @device_a, 0x3e}, @not_ext={{}, @device_b, 0x1, "", 0x34}, @not_ext={{}, @broadcast, 0xcc8, "", 0x22}, @ext={{}, @broadcast, 0x6, @broadcast, 0x10}, @ext={{}, @broadcast, 0x9, @device_a, 0x40}, @not_ext={{}, @device_b, 0x9, "", 0x1c}, @not_ext={{}, @broadcast, 0x800, "", 0x3a}, @ext={{}, @device_a, 0x5, @device_a, 0x1d}, @ext={{}, @device_b, 0x4, @broadcast, 0x2e}, @not_ext={{}, @device_b, 0xfffffff8, "", 0x2b}, @not_ext={{}, @device_a, 0x8000, "", 0x1e}, @ext={{}, @device_a, 0x3, @device_b, 0x2b}, @ext={{}, @broadcast, 0x5f4, @device_a, 0x1f}, @not_ext={{}, @broadcast, 0x810e, "", 0xf}, @ext={{}, @device_a, 0x10001, @device_a, 0x18}, @ext={{}, @device_a, 0x8, @device_a, 0x17}, @not_ext={{}, @device_a, 0x1f6, "", 0x2e}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) setsockopt$rose(r3, 0x104, 0x4, &(0x7f0000000040)=0x3, 0x4) 18:55:54 executing program 4: syz_clone(0x44040000, 0x0, 0xd800, 0x0, 0x0, 0x0) 18:55:54 executing program 5: syz_clone(0x44040000, 0x0, 0xd602, 0x0, 0x0, 0x0) 18:55:54 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) r6 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x178, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1f, 0x6a}}}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random="a7bd"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x46}]}, @NL80211_ATTR_IE={0x11b, 0x2a, [@perr={0x84, 0x115, {0x0, 0x11, [@ext={{}, @broadcast, 0x0, @device_a, 0x3e}, @not_ext={{}, @device_b, 0x1, "", 0x34}, @not_ext={{}, @broadcast, 0xcc8, "", 0x22}, @ext={{}, @broadcast, 0x6, @broadcast, 0x10}, @ext={{}, @broadcast, 0x9, @device_a, 0x40}, @not_ext={{}, @device_b, 0x9, "", 0x1c}, @not_ext={{}, @broadcast, 0x800, "", 0x3a}, @ext={{}, @device_a, 0x5, @device_a, 0x1d}, @ext={{}, @device_b, 0x4, @broadcast, 0x2e}, @not_ext={{}, @device_b, 0xfffffff8, "", 0x2b}, @not_ext={{}, @device_a, 0x8000, "", 0x1e}, @ext={{}, @device_a, 0x3, @device_b, 0x2b}, @ext={{}, @broadcast, 0x5f4, @device_a, 0x1f}, @not_ext={{}, @broadcast, 0x810e, "", 0xf}, @ext={{}, @device_a, 0x10001, @device_a, 0x18}, @ext={{}, @device_a, 0x8, @device_a, 0x17}, @not_ext={{}, @device_a, 0x1f6, "", 0x2e}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) setsockopt$rose(r3, 0x104, 0x4, &(0x7f0000000040)=0x3, 0x4) 18:55:54 executing program 2: syz_clone(0x44040190, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:54 executing program 3: syz_clone(0x44040000, 0x0, 0x1100, 0x0, 0x0, 0x0) 18:55:54 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) r6 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x178, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1f, 0x6a}}}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random="a7bd"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x46}]}, @NL80211_ATTR_IE={0x11b, 0x2a, [@perr={0x84, 0x115, {0x0, 0x11, [@ext={{}, @broadcast, 0x0, @device_a, 0x3e}, @not_ext={{}, @device_b, 0x1, "", 0x34}, @not_ext={{}, @broadcast, 0xcc8, "", 0x22}, @ext={{}, @broadcast, 0x6, @broadcast, 0x10}, @ext={{}, @broadcast, 0x9, @device_a, 0x40}, @not_ext={{}, @device_b, 0x9, "", 0x1c}, @not_ext={{}, @broadcast, 0x800, "", 0x3a}, @ext={{}, @device_a, 0x5, @device_a, 0x1d}, @ext={{}, @device_b, 0x4, @broadcast, 0x2e}, @not_ext={{}, @device_b, 0xfffffff8, "", 0x2b}, @not_ext={{}, @device_a, 0x8000, "", 0x1e}, @ext={{}, @device_a, 0x3, @device_b, 0x2b}, @ext={{}, @broadcast, 0x5f4, @device_a, 0x1f}, @not_ext={{}, @broadcast, 0x810e, "", 0xf}, @ext={{}, @device_a, 0x10001, @device_a, 0x18}, @ext={{}, @device_a, 0x8, @device_a, 0x17}, @not_ext={{}, @device_a, 0x1f6, "", 0x2e}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 18:55:54 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) r5 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x178, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1f, 0x6a}}}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random="a7bd"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x46}]}, @NL80211_ATTR_IE={0x11b, 0x2a, [@perr={0x84, 0x115, {0x0, 0x11, [@ext={{}, @broadcast, 0x0, @device_a, 0x3e}, @not_ext={{}, @device_b, 0x1, "", 0x34}, @not_ext={{}, @broadcast, 0xcc8, "", 0x22}, @ext={{}, @broadcast, 0x6, @broadcast, 0x10}, @ext={{}, @broadcast, 0x9, @device_a, 0x40}, @not_ext={{}, @device_b, 0x9, "", 0x1c}, @not_ext={{}, @broadcast, 0x800, "", 0x3a}, @ext={{}, @device_a, 0x5, @device_a, 0x1d}, @ext={{}, @device_b, 0x4, @broadcast, 0x2e}, @not_ext={{}, @device_b, 0xfffffff8, "", 0x2b}, @not_ext={{}, @device_a, 0x8000, "", 0x1e}, @ext={{}, @device_a, 0x3, @device_b, 0x2b}, @ext={{}, @broadcast, 0x5f4, @device_a, 0x1f}, @not_ext={{}, @broadcast, 0x810e, "", 0xf}, @ext={{}, @device_a, 0x10001, @device_a, 0x18}, @ext={{}, @device_a, 0x8, @device_a, 0x17}, @not_ext={{}, @device_a, 0x1f6, "", 0x2e}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 18:55:54 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) r6 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x178, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1f, 0x6a}}}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random="a7bd"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x46}]}, @NL80211_ATTR_IE={0x11b, 0x2a, [@perr={0x84, 0x115, {0x0, 0x11, [@ext={{}, @broadcast, 0x0, @device_a, 0x3e}, @not_ext={{}, @device_b, 0x1, "", 0x34}, @not_ext={{}, @broadcast, 0xcc8, "", 0x22}, @ext={{}, @broadcast, 0x6, @broadcast, 0x10}, @ext={{}, @broadcast, 0x9, @device_a, 0x40}, @not_ext={{}, @device_b, 0x9, "", 0x1c}, @not_ext={{}, @broadcast, 0x800, "", 0x3a}, @ext={{}, @device_a, 0x5, @device_a, 0x1d}, @ext={{}, @device_b, 0x4, @broadcast, 0x2e}, @not_ext={{}, @device_b, 0xfffffff8, "", 0x2b}, @not_ext={{}, @device_a, 0x8000, "", 0x1e}, @ext={{}, @device_a, 0x3, @device_b, 0x2b}, @ext={{}, @broadcast, 0x5f4, @device_a, 0x1f}, @not_ext={{}, @broadcast, 0x810e, "", 0xf}, @ext={{}, @device_a, 0x10001, @device_a, 0x18}, @ext={{}, @device_a, 0x8, @device_a, 0x17}, @not_ext={{}, @device_a, 0x1f6, "", 0x2e}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 18:55:54 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) 18:55:54 executing program 4: syz_clone(0x44040000, 0x0, 0xe000, 0x0, 0x0, 0x0) 18:55:54 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) r6 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x178, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1f, 0x6a}}}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random="a7bd"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x46}]}, @NL80211_ATTR_IE={0x11b, 0x2a, [@perr={0x84, 0x115, {0x0, 0x11, [@ext={{}, @broadcast, 0x0, @device_a, 0x3e}, @not_ext={{}, @device_b, 0x1, "", 0x34}, @not_ext={{}, @broadcast, 0xcc8, "", 0x22}, @ext={{}, @broadcast, 0x6, @broadcast, 0x10}, @ext={{}, @broadcast, 0x9, @device_a, 0x40}, @not_ext={{}, @device_b, 0x9, "", 0x1c}, @not_ext={{}, @broadcast, 0x800, "", 0x3a}, @ext={{}, @device_a, 0x5, @device_a, 0x1d}, @ext={{}, @device_b, 0x4, @broadcast, 0x2e}, @not_ext={{}, @device_b, 0xfffffff8, "", 0x2b}, @not_ext={{}, @device_a, 0x8000, "", 0x1e}, @ext={{}, @device_a, 0x3, @device_b, 0x2b}, @ext={{}, @broadcast, 0x5f4, @device_a, 0x1f}, @not_ext={{}, @broadcast, 0x810e, "", 0xf}, @ext={{}, @device_a, 0x10001, @device_a, 0x18}, @ext={{}, @device_a, 0x8, @device_a, 0x17}, @not_ext={{}, @device_a, 0x1f6, "", 0x2e}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 18:55:54 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) syz_io_uring_complete(0x0) 18:55:54 executing program 2: syz_clone(0x44040000, 0x0, 0xd800, 0x0, 0x0, 0x0) 18:55:54 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) r5 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x178, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1f, 0x6a}}}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random="a7bd"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x46}]}, @NL80211_ATTR_IE={0x11b, 0x2a, [@perr={0x84, 0x115, {0x0, 0x11, [@ext={{}, @broadcast, 0x0, @device_a, 0x3e}, @not_ext={{}, @device_b, 0x1, "", 0x34}, @not_ext={{}, @broadcast, 0xcc8, "", 0x22}, @ext={{}, @broadcast, 0x6, @broadcast, 0x10}, @ext={{}, @broadcast, 0x9, @device_a, 0x40}, @not_ext={{}, @device_b, 0x9, "", 0x1c}, @not_ext={{}, @broadcast, 0x800, "", 0x3a}, @ext={{}, @device_a, 0x5, @device_a, 0x1d}, @ext={{}, @device_b, 0x4, @broadcast, 0x2e}, @not_ext={{}, @device_b, 0xfffffff8, "", 0x2b}, @not_ext={{}, @device_a, 0x8000, "", 0x1e}, @ext={{}, @device_a, 0x3, @device_b, 0x2b}, @ext={{}, @broadcast, 0x5f4, @device_a, 0x1f}, @not_ext={{}, @broadcast, 0x810e, "", 0xf}, @ext={{}, @device_a, 0x10001, @device_a, 0x18}, @ext={{}, @device_a, 0x8, @device_a, 0x17}, @not_ext={{}, @device_a, 0x1f6, "", 0x2e}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 18:55:54 executing program 3: syz_clone(0x44040000, 0x0, 0x1a03, 0x0, 0x0, 0x0) 18:55:54 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) r6 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x178, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1f, 0x6a}}}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random="a7bd"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x46}]}, @NL80211_ATTR_IE={0x11b, 0x2a, [@perr={0x84, 0x115, {0x0, 0x11, [@ext={{}, @broadcast, 0x0, @device_a, 0x3e}, @not_ext={{}, @device_b, 0x1, "", 0x34}, @not_ext={{}, @broadcast, 0xcc8, "", 0x22}, @ext={{}, @broadcast, 0x6, @broadcast, 0x10}, @ext={{}, @broadcast, 0x9, @device_a, 0x40}, @not_ext={{}, @device_b, 0x9, "", 0x1c}, @not_ext={{}, @broadcast, 0x800, "", 0x3a}, @ext={{}, @device_a, 0x5, @device_a, 0x1d}, @ext={{}, @device_b, 0x4, @broadcast, 0x2e}, @not_ext={{}, @device_b, 0xfffffff8, "", 0x2b}, @not_ext={{}, @device_a, 0x8000, "", 0x1e}, @ext={{}, @device_a, 0x3, @device_b, 0x2b}, @ext={{}, @broadcast, 0x5f4, @device_a, 0x1f}, @not_ext={{}, @broadcast, 0x810e, "", 0xf}, @ext={{}, @device_a, 0x10001, @device_a, 0x18}, @ext={{}, @device_a, 0x8, @device_a, 0x17}, @not_ext={{}, @device_a, 0x1f6, "", 0x2e}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 18:55:54 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) 18:55:55 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) syz_io_uring_complete(0x0) 18:55:55 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) r6 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x178, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1f, 0x6a}}}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random="a7bd"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x46}]}, @NL80211_ATTR_IE={0x11b, 0x2a, [@perr={0x84, 0x115, {0x0, 0x11, [@ext={{}, @broadcast, 0x0, @device_a, 0x3e}, @not_ext={{}, @device_b, 0x1, "", 0x34}, @not_ext={{}, @broadcast, 0xcc8, "", 0x22}, @ext={{}, @broadcast, 0x6, @broadcast, 0x10}, @ext={{}, @broadcast, 0x9, @device_a, 0x40}, @not_ext={{}, @device_b, 0x9, "", 0x1c}, @not_ext={{}, @broadcast, 0x800, "", 0x3a}, @ext={{}, @device_a, 0x5, @device_a, 0x1d}, @ext={{}, @device_b, 0x4, @broadcast, 0x2e}, @not_ext={{}, @device_b, 0xfffffff8, "", 0x2b}, @not_ext={{}, @device_a, 0x8000, "", 0x1e}, @ext={{}, @device_a, 0x3, @device_b, 0x2b}, @ext={{}, @broadcast, 0x5f4, @device_a, 0x1f}, @not_ext={{}, @broadcast, 0x810e, "", 0xf}, @ext={{}, @device_a, 0x10001, @device_a, 0x18}, @ext={{}, @device_a, 0x8, @device_a, 0x17}, @not_ext={{}, @device_a, 0x1f6, "", 0x2e}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 18:55:55 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) 18:55:55 executing program 4: syz_clone(0x44040000, 0x0, 0xe200, 0x0, 0x0, 0x0) 18:55:55 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) r6 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x178, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1f, 0x6a}}}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random="a7bd"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x46}]}, @NL80211_ATTR_IE={0x11b, 0x2a, [@perr={0x84, 0x115, {0x0, 0x11, [@ext={{}, @broadcast, 0x0, @device_a, 0x3e}, @not_ext={{}, @device_b, 0x1, "", 0x34}, @not_ext={{}, @broadcast, 0xcc8, "", 0x22}, @ext={{}, @broadcast, 0x6, @broadcast, 0x10}, @ext={{}, @broadcast, 0x9, @device_a, 0x40}, @not_ext={{}, @device_b, 0x9, "", 0x1c}, @not_ext={{}, @broadcast, 0x800, "", 0x3a}, @ext={{}, @device_a, 0x5, @device_a, 0x1d}, @ext={{}, @device_b, 0x4, @broadcast, 0x2e}, @not_ext={{}, @device_b, 0xfffffff8, "", 0x2b}, @not_ext={{}, @device_a, 0x8000, "", 0x1e}, @ext={{}, @device_a, 0x3, @device_b, 0x2b}, @ext={{}, @broadcast, 0x5f4, @device_a, 0x1f}, @not_ext={{}, @broadcast, 0x810e, "", 0xf}, @ext={{}, @device_a, 0x10001, @device_a, 0x18}, @ext={{}, @device_a, 0x8, @device_a, 0x17}, @not_ext={{}, @device_a, 0x1f6, "", 0x2e}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 18:55:55 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) 18:55:55 executing program 5: syz_clone(0x44040000, 0x0, 0xe03, 0x0, 0x0, 0x0) 18:55:55 executing program 3: syz_clone(0x44040000, 0x0, 0x1c01, 0x0, 0x0, 0x0) 18:55:55 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) r6 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x178, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1f, 0x6a}}}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random="a7bd"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x46}]}, @NL80211_ATTR_IE={0x11b, 0x2a, [@perr={0x84, 0x115, {0x0, 0x11, [@ext={{}, @broadcast, 0x0, @device_a, 0x3e}, @not_ext={{}, @device_b, 0x1, "", 0x34}, @not_ext={{}, @broadcast, 0xcc8, "", 0x22}, @ext={{}, @broadcast, 0x6, @broadcast, 0x10}, @ext={{}, @broadcast, 0x9, @device_a, 0x40}, @not_ext={{}, @device_b, 0x9, "", 0x1c}, @not_ext={{}, @broadcast, 0x800, "", 0x3a}, @ext={{}, @device_a, 0x5, @device_a, 0x1d}, @ext={{}, @device_b, 0x4, @broadcast, 0x2e}, @not_ext={{}, @device_b, 0xfffffff8, "", 0x2b}, @not_ext={{}, @device_a, 0x8000, "", 0x1e}, @ext={{}, @device_a, 0x3, @device_b, 0x2b}, @ext={{}, @broadcast, 0x5f4, @device_a, 0x1f}, @not_ext={{}, @broadcast, 0x810e, "", 0xf}, @ext={{}, @device_a, 0x10001, @device_a, 0x18}, @ext={{}, @device_a, 0x8, @device_a, 0x17}, @not_ext={{}, @device_a, 0x1f6, "", 0x2e}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 18:55:55 executing program 2: syz_clone(0x44040000, 0x0, 0xd800, 0x0, 0x0, 0x0) 18:55:55 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 18:55:55 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 18:55:55 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) r6 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x178, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1f, 0x6a}}}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random="a7bd"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x46}]}, @NL80211_ATTR_IE={0x11b, 0x2a, [@perr={0x84, 0x115, {0x0, 0x11, [@ext={{}, @broadcast, 0x0, @device_a, 0x3e}, @not_ext={{}, @device_b, 0x1, "", 0x34}, @not_ext={{}, @broadcast, 0xcc8, "", 0x22}, @ext={{}, @broadcast, 0x6, @broadcast, 0x10}, @ext={{}, @broadcast, 0x9, @device_a, 0x40}, @not_ext={{}, @device_b, 0x9, "", 0x1c}, @not_ext={{}, @broadcast, 0x800, "", 0x3a}, @ext={{}, @device_a, 0x5, @device_a, 0x1d}, @ext={{}, @device_b, 0x4, @broadcast, 0x2e}, @not_ext={{}, @device_b, 0xfffffff8, "", 0x2b}, @not_ext={{}, @device_a, 0x8000, "", 0x1e}, @ext={{}, @device_a, 0x3, @device_b, 0x2b}, @ext={{}, @broadcast, 0x5f4, @device_a, 0x1f}, @not_ext={{}, @broadcast, 0x810e, "", 0xf}, @ext={{}, @device_a, 0x10001, @device_a, 0x18}, @ext={{}, @device_a, 0x8, @device_a, 0x17}, @not_ext={{}, @device_a, 0x1f6, "", 0x2e}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 18:55:55 executing program 4: syz_clone(0x44040000, 0x0, 0xec02, 0x0, 0x0, 0x0) 18:55:55 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 18:55:55 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) r5 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x178, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1f, 0x6a}}}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random="a7bd"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x46}]}, @NL80211_ATTR_IE={0x11b, 0x2a, [@perr={0x84, 0x115, {0x0, 0x11, [@ext={{}, @broadcast, 0x0, @device_a, 0x3e}, @not_ext={{}, @device_b, 0x1, "", 0x34}, @not_ext={{}, @broadcast, 0xcc8, "", 0x22}, @ext={{}, @broadcast, 0x6, @broadcast, 0x10}, @ext={{}, @broadcast, 0x9, @device_a, 0x40}, @not_ext={{}, @device_b, 0x9, "", 0x1c}, @not_ext={{}, @broadcast, 0x800, "", 0x3a}, @ext={{}, @device_a, 0x5, @device_a, 0x1d}, @ext={{}, @device_b, 0x4, @broadcast, 0x2e}, @not_ext={{}, @device_b, 0xfffffff8, "", 0x2b}, @not_ext={{}, @device_a, 0x8000, "", 0x1e}, @ext={{}, @device_a, 0x3, @device_b, 0x2b}, @ext={{}, @broadcast, 0x5f4, @device_a, 0x1f}, @not_ext={{}, @broadcast, 0x810e, "", 0xf}, @ext={{}, @device_a, 0x10001, @device_a, 0x18}, @ext={{}, @device_a, 0x8, @device_a, 0x17}, @not_ext={{}, @device_a, 0x1f6, "", 0x2e}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 18:55:55 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 18:55:55 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) 18:55:56 executing program 3: syz_clone(0x44040000, 0x0, 0x1e00, 0x0, 0x0, 0x0) 18:55:56 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 18:55:56 executing program 5: syz_clone(0x44040000, 0x0, 0x1c01, 0x0, 0x0, 0x0) 18:55:56 executing program 2: syz_clone(0x44040000, 0x0, 0xec02, 0x0, 0x0, 0x0) 18:55:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) syz_io_uring_complete(0x0) 18:55:56 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 18:55:56 executing program 4: syz_clone(0x44040000, 0x0, 0xf000, 0x0, 0x0, 0x0) 18:55:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x24}}, 0x4080800) 18:55:56 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) 18:55:56 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) 18:55:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000640000000800010055000000"], 0x1c}}, 0x0) 18:55:56 executing program 3: syz_clone(0x44040000, 0x0, 0x1f00, 0x0, 0x0, 0x0) 18:55:56 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) 18:55:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) 18:55:56 executing program 5: syz_clone(0x44040000, 0x0, 0x1c01, 0x0, 0x0, 0x0) 18:55:56 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) 18:55:56 executing program 4: syz_clone(0x44040000, 0x0, 0xf403, 0x0, 0x0, 0x0) 18:55:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 18:55:56 executing program 2: syz_clone(0x44040000, 0x0, 0xe200, 0x0, 0x0, 0x0) 18:55:56 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) 18:55:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 18:55:56 executing program 3: syz_clone(0x44040000, 0x0, 0x2000, 0x0, 0x0, 0x0) 18:55:56 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) 18:55:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 18:55:57 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) 18:55:57 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 18:55:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 18:55:57 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) 18:55:57 executing program 4: syz_clone(0x44040000, 0x0, 0xf803, 0x0, 0x0, 0x0) 18:55:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 18:55:57 executing program 2: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) 18:55:57 executing program 5: syz_clone(0x44040000, 0x0, 0xf403, 0x0, 0x0, 0x0) 18:55:57 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) 18:55:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 18:55:57 executing program 3: syz_clone(0x44040000, 0x0, 0x2c01, 0x0, 0x0, 0x0) 18:55:57 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) 18:55:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x40000) 18:55:57 executing program 2: syz_clone(0x44040000, 0x0, 0x1a03, 0x0, 0x0, 0x0) 18:55:57 executing program 1: socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) 18:55:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) 18:55:57 executing program 4: syz_clone(0x44040000, 0x0, 0xfa03, 0x0, 0x0, 0x0) 18:55:57 executing program 1: socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) 18:55:57 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) 18:55:58 executing program 5: syz_clone(0x44040186, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:58 executing program 1: socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) 18:55:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) 18:55:58 executing program 3: syz_clone(0x44040000, 0x0, 0x2e03, 0x0, 0x0, 0x0) 18:55:58 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) 18:55:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) 18:55:58 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) 18:55:58 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) 18:55:58 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x2b) r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) 18:55:58 executing program 4: syz_clone(0x44040000, 0x0, 0xfd01, 0x0, 0x0, 0x0) 18:55:58 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) 18:55:58 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) 18:55:58 executing program 5: syz_clone(0x4404028b, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:58 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) 18:55:58 executing program 0: r0 = socket$kcm(0x29, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) 18:55:58 executing program 3: syz_clone(0x44040000, 0x0, 0x3500, 0x0, 0x0, 0x0) 18:55:58 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) 18:55:58 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) 18:55:58 executing program 0: r0 = socket$kcm(0x29, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) 18:55:58 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) 18:55:58 executing program 4: syz_clone(0x44040000, 0x0, 0x20010, 0x0, 0x0, 0x0) 18:55:58 executing program 0: r0 = socket$kcm(0x29, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) 18:55:58 executing program 2: setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) 18:55:58 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) 18:55:59 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000fddbdf25570000000c00990008000000670000000600950008000000060095efffffffff050095003f00000006009500004000000600950000fe0000"], 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x649fb0f363435e0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x2d882ccc2e5d50c3, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x3, [@default, @default, @null, @bcast, @default, @null, @bcast, @bcast]}) 18:55:59 executing program 2: setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) 18:55:59 executing program 0: socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) 18:55:59 executing program 3: syz_clone(0x44040000, 0x0, 0x3501, 0x0, 0x0, 0x0) 18:55:59 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) 18:55:59 executing program 0: socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) 18:55:59 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) 18:55:59 executing program 4: syz_clone(0x44040000, 0x0, 0x20200, 0x0, 0x0, 0x0) 18:55:59 executing program 2: setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) 18:55:59 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000000)=0x4, 0x4) 18:55:59 executing program 0: socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000)=0x800, 0x4) 18:55:59 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) 18:55:59 executing program 2: r0 = socket$kcm(0x29, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) 18:55:59 executing program 1: setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000), 0x4) 18:55:59 executing program 2: r0 = socket$kcm(0x29, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) 18:55:59 executing program 3: syz_clone(0x44040000, 0x0, 0x3800, 0x0, 0x0, 0x0) 18:55:59 executing program 5: syz_clone(0x4404023c, 0x0, 0x0, 0x0, 0x0, 0x0) 18:55:59 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) 18:55:59 executing program 1: setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000), 0x4) 18:55:59 executing program 4: syz_clone(0x44040000, 0x0, 0x27000, 0x0, 0x0, 0x0) 18:55:59 executing program 2: r0 = socket$kcm(0x29, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) 18:55:59 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) 18:55:59 executing program 1: setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000), 0x4) 18:55:59 executing program 2: socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) 18:55:59 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) 18:55:59 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) 18:55:59 executing program 2: socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) 18:56:00 executing program 3: syz_clone(0x44040000, 0x0, 0x3a01, 0x0, 0x0, 0x0) 18:56:00 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) 18:56:00 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) 18:56:00 executing program 2: socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) 18:56:00 executing program 4: syz_clone(0x44040000, 0x0, 0x3ffff, 0x0, 0x0, 0x0) 18:56:00 executing program 5: syz_clone(0x44040238, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:00 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) 18:56:00 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) 18:56:00 executing program 2: syz_clone(0x44040234, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:00 executing program 1: socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000), 0x4) 18:56:00 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) 18:56:00 executing program 1: socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000), 0x4) 18:56:00 executing program 3: syz_clone(0x44040000, 0x0, 0x3c02, 0x0, 0x0, 0x0) 18:56:00 executing program 1: socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000), 0x4) 18:56:00 executing program 0: syz_clone(0x4404012c, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:00 executing program 5: syz_clone(0x440401fd, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:00 executing program 4: syz_clone(0x44040000, 0x0, 0x40000, 0x0, 0x0, 0x0) 18:56:01 executing program 2: syz_clone(0x44040000, 0x0, 0x3ffff, 0x0, 0x0, 0x0) 18:56:01 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) 18:56:01 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) 18:56:01 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) 18:56:01 executing program 0: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000000)={0x3f, 0x1}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) read$fb(r0, &(0x7f0000000080)=""/200, 0xc8) socketpair(0x26, 0xa, 0x6, &(0x7f0000000040)) 18:56:01 executing program 1: syz_clone(0x440400e0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:01 executing program 3: syz_clone(0x44040000, 0x0, 0x3f00, 0x0, 0x0, 0x0) 18:56:01 executing program 5: syz_clone(0x4404012c, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:01 executing program 2: syz_clone(0x4404011c, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:01 executing program 0: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000000)={0x3f, 0x1}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) read$fb(r0, &(0x7f0000000080)=""/200, 0xc8) socketpair(0x26, 0xa, 0x6, &(0x7f0000000040)) 18:56:01 executing program 4: syz_clone(0x44040000, 0x0, 0x50000, 0x0, 0x0, 0x0) 18:56:01 executing program 0: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000000)={0x3f, 0x1}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) read$fb(r0, &(0x7f0000000080)=""/200, 0xc8) socketpair(0x26, 0xa, 0x6, &(0x7f0000000040)) 18:56:02 executing program 0: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000000)={0x3f, 0x1}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) read$fb(r0, &(0x7f0000000080)=""/200, 0xc8) 18:56:02 executing program 0: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000000)={0x3f, 0x1}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$fb(r0, &(0x7f0000000080)=""/200, 0xc8) 18:56:02 executing program 0: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000000)={0x3f, 0x1}) read$fb(0xffffffffffffffff, &(0x7f0000000080)=""/200, 0xc8) 18:56:02 executing program 3: syz_clone(0x44040000, 0x0, 0x4000, 0x0, 0x0, 0x0) 18:56:02 executing program 2: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000000)={0x3f, 0x1}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) read$fb(r0, &(0x7f0000000080)=""/200, 0xc8) 18:56:02 executing program 1: syz_clone(0x44040000, 0x0, 0x40000, 0x0, 0x0, 0x0) 18:56:02 executing program 4: syz_clone(0x44040000, 0x0, 0x80000, 0x0, 0x0, 0x0) 18:56:02 executing program 5: syz_clone(0x4404012c, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:02 executing program 0: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000000)={0x3f, 0x1}) read$fb(0xffffffffffffffff, &(0x7f0000000080)=""/200, 0xc8) 18:56:02 executing program 2: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000000)={0x3f, 0x1}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) read$fb(r0, &(0x7f0000000080)=""/200, 0xc8) 18:56:02 executing program 0: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000000)={0x3f, 0x1}) read$fb(0xffffffffffffffff, &(0x7f0000000080)=""/200, 0xc8) 18:56:02 executing program 2: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000000)={0x3f, 0x1}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) read$fb(r0, &(0x7f0000000080)=""/200, 0xc8) 18:56:02 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$fb(r0, &(0x7f0000000080)=""/200, 0xc8) 18:56:02 executing program 2: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000000)={0x3f, 0x1}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$fb(r0, &(0x7f0000000080)=""/200, 0xc8) 18:56:02 executing program 3: syz_clone(0x44040000, 0x0, 0x4100, 0x0, 0x0, 0x0) 18:56:02 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$fb(r0, &(0x7f0000000080)=""/200, 0xc8) 18:56:02 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$fb(r0, &(0x7f0000000080)=""/200, 0xc8) 18:56:02 executing program 1: syz_clone(0x44040000, 0x0, 0x80000, 0x0, 0x0, 0x0) 18:56:02 executing program 2: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000000)={0x3f, 0x1}) read$fb(0xffffffffffffffff, &(0x7f0000000080)=""/200, 0xc8) 18:56:03 executing program 5: syz_clone(0x44040000, 0x0, 0x4000, 0x0, 0x0, 0x0) 18:56:03 executing program 4: syz_clone(0x44040000, 0x0, 0x100000, 0x0, 0x0, 0x0) 18:56:03 executing program 2: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000000)={0x3f, 0x1}) read$fb(0xffffffffffffffff, &(0x7f0000000080)=""/200, 0xc8) 18:56:03 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$fb(r0, &(0x7f0000000080)=""/200, 0xc8) 18:56:03 executing program 2: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000000)={0x3f, 0x1}) read$fb(0xffffffffffffffff, &(0x7f0000000080)=""/200, 0xc8) 18:56:03 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000080)=""/200, 0xc8) 18:56:03 executing program 3: syz_clone(0x44040000, 0x0, 0x4903, 0x0, 0x0, 0x0) 18:56:03 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$fb(r0, &(0x7f0000000080)=""/200, 0xc8) 18:56:03 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000080)=""/200, 0xc8) 18:56:03 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$fb(r0, &(0x7f0000000080)=""/200, 0xc8) 18:56:03 executing program 1: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000080)=""/200, 0xc8) 18:56:03 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000080)=""/200, 0xc8) 18:56:03 executing program 5: syz_clone(0x44040000, 0x0, 0x50000, 0x0, 0x0, 0x0) 18:56:03 executing program 4: syz_clone(0x44040000, 0x0, 0x101000, 0x0, 0x0, 0x0) 18:56:03 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$fb(r0, &(0x7f0000000080)=""/200, 0xc8) 18:56:03 executing program 3: syz_clone(0x44040000, 0x0, 0x4e02, 0x0, 0x0, 0x0) 18:56:03 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$fb(r0, 0x0, 0x0) 18:56:03 executing program 1: syz_clone(0x44040000, 0x0, 0x4903, 0x0, 0x0, 0x0) 18:56:03 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$fb(r0, 0x0, 0x0) 18:56:03 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$fb(r0, &(0x7f0000000080)=""/200, 0xc8) 18:56:03 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$fb(r0, 0x0, 0x0) 18:56:03 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000080)=""/200, 0xc8) 18:56:03 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000080)=""/200, 0xc8) 18:56:03 executing program 0: syz_clone(0x44040096, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:04 executing program 5: syz_clone(0x440400e0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:04 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000080)=""/200, 0xc8) 18:56:04 executing program 4: syz_clone(0x44040000, 0x0, 0x400000, 0x0, 0x0, 0x0) 18:56:04 executing program 3: syz_clone(0x44040000, 0x0, 0x5602, 0x0, 0x0, 0x0) 18:56:04 executing program 1: syz_clone(0x44040084, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:04 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$fb(r0, 0x0, 0x0) 18:56:04 executing program 0: syz_clone(0x440400d8, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:04 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$fb(r0, 0x0, 0x0) 18:56:04 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$fb(r0, 0x0, 0x0) 18:56:04 executing program 3: syz_clone(0x44040000, 0x0, 0x5803, 0x0, 0x0, 0x0) 18:56:04 executing program 2: syz_clone(0x440400c0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:04 executing program 4: syz_clone(0x44040000, 0x0, 0x700200, 0x0, 0x0, 0x0) 18:56:04 executing program 5: syz_clone(0x44040084, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:04 executing program 1: syz_clone(0x44040084, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:04 executing program 0: syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(0xffffffffffffffff, 0x104, 0x4, &(0x7f0000000000)=0x3, 0x4) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0x90000) 18:56:05 executing program 0: syz_clone(0x44040035, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:05 executing program 3: syz_clone(0x44040000, 0x0, 0x5c00, 0x0, 0x0, 0x0) 18:56:05 executing program 2: syz_clone(0x44040000, 0x0, 0x5803, 0x0, 0x0, 0x0) 18:56:05 executing program 4: syz_clone(0x44040000, 0x0, 0x80278f, 0x0, 0x0, 0x0) 18:56:05 executing program 1: syz_clone(0x44040084, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:05 executing program 5: syz_clone(0x4404006d, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:05 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x7464a0, 0x0) setsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000000)=0x7e, 0x4) 18:56:05 executing program 0: syz_clone(0x4404005c, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:05 executing program 2: syz_clone(0x44040041, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:05 executing program 3: syz_clone(0x44040000, 0x0, 0x5c01, 0x0, 0x0, 0x0) 18:56:05 executing program 4: syz_clone(0x44040000, 0x0, 0xc0ffff, 0x0, 0x0, 0x0) 18:56:05 executing program 1: syz_clone(0x44040010, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:05 executing program 5: syz_clone(0x44040035, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:05 executing program 0: syz_clone(0x4404000a, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:06 executing program 3: syz_clone(0x44040000, 0x0, 0x6201, 0x0, 0x0, 0x0) 18:56:06 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) 18:56:06 executing program 2: syz_clone(0x44040007, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:06 executing program 4: syz_clone(0x44040000, 0x0, 0xe00000, 0x0, 0x0, 0x0) 18:56:06 executing program 1: syz_clone(0x44040000, 0x0, 0xc0ffff, 0x0, 0x0, 0x0) 18:56:06 executing program 0: syz_clone(0x44040010, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:06 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0xc}, 0x10) socketpair(0xf, 0x800, 0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000002c0), 0x1000000000000067, &(0x7f0000000000)=""/44, 0x2c}, 0x60000022) 18:56:06 executing program 3: syz_clone(0x44040000, 0x0, 0x6202, 0x0, 0x0, 0x0) 18:56:06 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0xc}, 0x10) socketpair(0xf, 0x800, 0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000002c0), 0x1000000000000067, &(0x7f0000000000)=""/44, 0x2c}, 0x60000022) 18:56:06 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0xc}, 0x10) socketpair(0xf, 0x800, 0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000002c0), 0x1000000000000067, &(0x7f0000000000)=""/44, 0x2c}, 0x60000022) 18:56:06 executing program 4: syz_clone(0x44040000, 0x0, 0xf0ff1f, 0x0, 0x0, 0x0) 18:56:06 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0xc}, 0x10) socketpair(0xf, 0x800, 0x1, &(0x7f0000000100)) 18:56:06 executing program 3: syz_clone(0x44040000, 0x0, 0x6801, 0x0, 0x0, 0x0) 18:56:06 executing program 0: syz_clone(0x44040000, 0x0, 0x6202, 0x0, 0x0, 0x0) 18:56:06 executing program 2: syz_clone(0x44040000, 0x0, 0xe00000, 0x0, 0x0, 0x0) 18:56:06 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0xc}, 0x10) 18:56:06 executing program 1: syz_clone(0x44040004, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:07 executing program 5: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 18:56:07 executing program 5: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 18:56:07 executing program 4: syz_clone(0x44040000, 0x0, 0xf0ffff, 0x0, 0x0, 0x0) 18:56:07 executing program 5: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 18:56:07 executing program 3: syz_clone(0x44040000, 0x0, 0x6d00, 0x0, 0x0, 0x0) 18:56:07 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0xc}, 0x10) 18:56:07 executing program 0: syz_clone(0x44040003, 0x0, 0x0, 0x0, 0x0, 0x0) 18:56:07 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0}, 0x10) 18:56:07 executing program 4: syz_clone(0x44040000, 0x0, 0x1000000, 0x0, 0x0, 0x0) 18:56:07 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x80c0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000300)) bind$rose(r1, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x275f, 0x61}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40880}, 0x51) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0xffff) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f00000000c0)=@bcast) 18:56:07 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd700099d4f7000000080003000000", @ANYRES32=r0, @ANYBLOB="0c00990000000000670000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a0006000802110000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048014) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) r1 = io_uring_setup(0x32f3, &(0x7f0000000140)={0x0, 0x9e2f, 0x4, 0x0, 0x258}) syz_io_uring_setup(0x7a62, &(0x7f00000001c0)={0x0, 0xf33f, 0x4, 0x2, 0x180, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000000700)={&(0x7f00000002c0)={{@hyper, 0x7b}, {@host, 0x1}, 0x400, "28aab96df8480d71e57abf7ce5e98be39626c5c5930f3f72ee84df3a538a493749ea1d063fcad9963da3fb2ecef50997a8491c2541ec3e29323435642b15080c65db58711bb0702cf1513dbc8c494dd94972d738406f482496fd91fd6f72793a3e1caa86be79b2dddd1c37ee288ffcebdd2f2ef82a5af8a8465fa793ae7196ce6c3ec23418331b6ab31a5280337a19816c8f6d0fbd34e2bcbd33cee7357991e1061a7201601153da737e1fb0bc41fa8eccdc0b86238a1a417bc0d5bf35b878a81031c1db9d89c618a7ad3e8f068f4f68876f82829ae53efc714183a574e4ca42fc228ad8e068ac26bb9a9458e135fe9b8890e97b18160e98d58b94f80e92a29086193d5634711dafadbb5c9dcaa3f7983cba3bf4c76bb3102fe9749bdb20bfc5f2c9bb67e273dc3fd8e1cb7a7a48034d15cd519abd76493df09b7898c29311ad1486ab30260f39ba64848cb46bba64e9cf392cd6face4d7e8f8c29e2e158110f18cf327cd7a571e8f13d102bd6d73616e5722ff2d9b65ec1173df3760d1f96b55805cead7cb72106a9b9aabbf1dc727470ddf26befb7367d7a4e9ae9b22ff54a96bf8f2bb5a01587479ccbb9092ce6445d06f8cbbe240f4ab6a3b543061b38c66de1f8bed5822355f7e35c5ba950380107e195226a53e1bfd152d7c17b624091ff1953556c8a60fa299d3f2b0f5e8d898d4feacde89eaaa278e5fd6e417770931148fb06b4ef3484c7b0d6cd11598aadea3a024cdeb77fdd2b640b227e55477261fd80cca98dab00e9ae18e307e6c61d58a0d7a141a24f06fa65d269e1d2fc7cc15c93c727ec568ff1dfefd364569246d94ba089606e373e08df7c71b112fb8c9389a6241e074033f94f080fcc6c3ca735de95c58c1618606cd17863b6200f7f0103786ebcb34d9b65126bc16b17b73eff742a0f99bae0543bde1dd6d1fae9d74fc94e0d1c60e328ceb80b273200093fbd6ef7d09afdc5ac84d9993b2c83672560078db6447002ed66ed92ddd2020615f59bda2219ce2a6ab59f770bcc401ea53fca15ad5685be94da24d20a3c94e3ad206c2810894e461e2df88474a4a03f94a400514bde3b781e209896bab03c063c6f1dcf1f90cf31af449c6f0b8589019adeac15a0d5a5cf268b6af412b2cebdcfe2e47f1ab2e88a1d416d548cc7d128c23fe378b709edc80aa08fbeb39ee06d840cabd8acdd35852b1b86d7fd6606e7196016a2d5fa7e1de4f9657d4714a8ab3747cf7d6e90d218701c6eeae42f8b312f71f04577396956f041374bf2abba6d254d529d35e506f03d36deab2e557dc4cbc4aaa4511fd27444d8c793899035e3b8107b9f48dc69de73b4f79bec7f440f220eefebce760ce5b6e995057012629a4d988ff9666da332192a59639ffc69b85f1ac44957d93bd5d3235f5b68e73eb48f82323605658d0239e2740d853a32df79"}, 0x418, 0x3}) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan1\x00'}) 18:56:07 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0}, 0x10) 18:56:07 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd700099d4f7000000080003000000", @ANYRES32=r0, @ANYBLOB="0c00990000000000670000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a0006000802110000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048014) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) r1 = io_uring_setup(0x32f3, &(0x7f0000000140)={0x0, 0x9e2f, 0x4, 0x0, 0x258}) syz_io_uring_setup(0x7a62, &(0x7f00000001c0)={0x0, 0xf33f, 0x4, 0x2, 0x180, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000000700)={&(0x7f00000002c0)={{@hyper, 0x7b}, {@host, 0x1}, 0x400, "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"}, 0x418, 0x3}) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan1\x00'}) 18:56:07 executing program 3: syz_clone(0x44040000, 0x0, 0x7602, 0x0, 0x0, 0x0) 18:56:07 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0}, 0x10) 18:56:07 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd700099d4f7000000080003000000", @ANYRES32=r0, @ANYBLOB="0c00990000000000670000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a0006000802110000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048014) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) r1 = io_uring_setup(0x32f3, &(0x7f0000000140)={0x0, 0x9e2f, 0x4, 0x0, 0x258}) syz_io_uring_setup(0x7a62, &(0x7f00000001c0)={0x0, 0xf33f, 0x4, 0x2, 0x180, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000000700)={&(0x7f00000002c0)={{@hyper, 0x7b}, {@host, 0x1}, 0x400, "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"}, 0x418, 0x3}) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan1\x00'}) 18:56:07 executing program 5: syz_clone(0x44040000, 0x0, 0x6d00, 0x0, 0x0, 0x0) 18:56:07 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd700099d4f7000000080003000000", @ANYRES32=r0, @ANYBLOB="0c00990000000000670000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a0006000802110000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048014) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) r1 = io_uring_setup(0x32f3, &(0x7f0000000140)={0x0, 0x9e2f, 0x4, 0x0, 0x258}) syz_io_uring_setup(0x7a62, &(0x7f00000001c0)={0x0, 0xf33f, 0x4, 0x2, 0x180, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000000700)={&(0x7f00000002c0)={{@hyper, 0x7b}, {@host, 0x1}, 0x400, "28aab96df8480d71e57abf7ce5e98be39626c5c5930f3f72ee84df3a538a493749ea1d063fcad9963da3fb2ecef50997a8491c2541ec3e29323435642b15080c65db58711bb0702cf1513dbc8c494dd94972d738406f482496fd91fd6f72793a3e1caa86be79b2dddd1c37ee288ffcebdd2f2ef82a5af8a8465fa793ae7196ce6c3ec23418331b6ab31a5280337a19816c8f6d0fbd34e2bcbd33cee7357991e1061a7201601153da737e1fb0bc41fa8eccdc0b86238a1a417bc0d5bf35b878a81031c1db9d89c618a7ad3e8f068f4f68876f82829ae53efc714183a574e4ca42fc228ad8e068ac26bb9a9458e135fe9b8890e97b18160e98d58b94f80e92a29086193d5634711dafadbb5c9dcaa3f7983cba3bf4c76bb3102fe9749bdb20bfc5f2c9bb67e273dc3fd8e1cb7a7a48034d15cd519abd76493df09b7898c29311ad1486ab30260f39ba64848cb46bba64e9cf392cd6face4d7e8f8c29e2e158110f18cf327cd7a571e8f13d102bd6d73616e5722ff2d9b65ec1173df3760d1f96b55805cead7cb72106a9b9aabbf1dc727470ddf26befb7367d7a4e9ae9b22ff54a96bf8f2bb5a01587479ccbb9092ce6445d06f8cbbe240f4ab6a3b543061b38c66de1f8bed5822355f7e35c5ba950380107e195226a53e1bfd152d7c17b624091ff1953556c8a60fa299d3f2b0f5e8d898d4feacde89eaaa278e5fd6e417770931148fb06b4ef3484c7b0d6cd11598aadea3a024cdeb77fdd2b640b227e55477261fd80cca98dab00e9ae18e307e6c61d58a0d7a141a24f06fa65d269e1d2fc7cc15c93c727ec568ff1dfefd364569246d94ba089606e373e08df7c71b112fb8c9389a6241e074033f94f080fcc6c3ca735de95c58c1618606cd17863b6200f7f0103786ebcb34d9b65126bc16b17b73eff742a0f99bae0543bde1dd6d1fae9d74fc94e0d1c60e328ceb80b273200093fbd6ef7d09afdc5ac84d9993b2c83672560078db6447002ed66ed92ddd2020615f59bda2219ce2a6ab59f770bcc401ea53fca15ad5685be94da24d20a3c94e3ad206c2810894e461e2df88474a4a03f94a400514bde3b781e209896bab03c063c6f1dcf1f90cf31af449c6f0b8589019adeac15a0d5a5cf268b6af412b2cebdcfe2e47f1ab2e88a1d416d548cc7d128c23fe378b709edc80aa08fbeb39ee06d840cabd8acdd35852b1b86d7fd6606e7196016a2d5fa7e1de4f9657d4714a8ab3747cf7d6e90d218701c6eeae42f8b312f71f04577396956f041374bf2abba6d254d529d35e506f03d36deab2e557dc4cbc4aaa4511fd27444d8c793899035e3b8107b9f48dc69de73b4f79bec7f440f220eefebce760ce5b6e995057012629a4d988ff9666da332192a59639ffc69b85f1ac44957d93bd5d3235f5b68e73eb48f82323605658d0239e2740d853a32df79"}, 0x418, 0x3}) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan1\x00'}) 18:56:07 executing program 0: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8080}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c0}, 0x4080) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 18:56:07 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd700099d4f7000000080003000000", @ANYRES32=r0, @ANYBLOB="0c00990000000000670000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a0006000802110000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048014) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) r1 = io_uring_setup(0x32f3, &(0x7f0000000140)={0x0, 0x9e2f, 0x4, 0x0, 0x258}) syz_io_uring_setup(0x7a62, &(0x7f00000001c0)={0x0, 0xf33f, 0x4, 0x2, 0x180, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000000700)={&(0x7f00000002c0)={{@hyper, 0x7b}, {@host, 0x1}, 0x400, "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"}, 0x418, 0x3}) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan1\x00'}) 18:56:07 executing program 4: syz_clone(0x44040000, 0x0, 0x1010000, 0x0, 0x0, 0x0) 18:56:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd4, r1, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x0, 0x6}, {0x0, 0x5}], "1dcb9e7dac90dbb9"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x2, 0x7}, {0x8, 0x6}, {0xbb, 0x1}, {0x81, 0x1}, {0x9, 0x1}, {0xff, 0x5}, {0x0, 0x6}, {0x3, 0x7}, {0x1, 0x2}, {0x34, 0x3}, {0x0, 0x3}, {0x8, 0x2}, {0x20, 0x3}, {0x6, 0x1}, {0x3, 0x3}, {0x9, 0x6}], "c00e0f02294015e2"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "51ea2a61b9d74b61"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3}, {0x3f, 0x5}, {0x9, 0x7}, {0x5}, {0xb1, 0x5}, {0x0, 0x5}], "b2a35495501c6289"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x9, 0x7}, {0x1f}, {0xcb, 0x5}, {0x76}, {0xff, 0x5}, {0xff, 0x6}, {0xa1, 0x6}, {0x9}, {0xfb, 0x7}, {0x9, 0x3}, {0xf0, 0x3}, {0x81, 0x5}, {0x0, 0x4}, {0xc8, 0x2}, {0x80, 0x1}, {0x18, 0x1}, {0x81, 0x5}, {0x0, 0x5}], "9430ee2377397375"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x8, 0x6}, {0x40, 0x1}, {0x1f, 0x1}, {0x0, 0x1}, {0x5, 0x3}, {0x6, 0x4}, {0x20, 0x5}, {0x3}, {0x0, 0x2}, {0x5, 0x1}, {0xd9, 0x3}, {0x3, 0x6}, {0x7f, 0x5}, {0x6, 0x6}, {0x78, 0x3}, {0x4, 0x4}, {0x5, 0x3}], "483ca9d9f6116791"}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x4, &(0x7f0000000000), 0x4) 18:56:07 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd700099d4f7000000080003000000", @ANYRES32=r0, @ANYBLOB="0c00990000000000670000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a0006000802110000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048014) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) r1 = io_uring_setup(0x32f3, &(0x7f0000000140)={0x0, 0x9e2f, 0x4, 0x0, 0x258}) syz_io_uring_setup(0x7a62, &(0x7f00000001c0)={0x0, 0xf33f, 0x4, 0x2, 0x180, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000000700)={&(0x7f00000002c0)={{@hyper, 0x7b}, {@host, 0x1}, 0x400, "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"}, 0x418, 0x3}) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan1\x00'}) 18:56:07 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd700099d4f7000000080003000000", @ANYRES32=r0, @ANYBLOB="0c00990000000000670000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a0006000802110000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048014) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) r1 = io_uring_setup(0x32f3, &(0x7f0000000140)={0x0, 0x9e2f, 0x4, 0x0, 0x258}) syz_io_uring_setup(0x7a62, &(0x7f00000001c0)={0x0, 0xf33f, 0x4, 0x2, 0x180, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000000700)={&(0x7f00000002c0)={{@hyper, 0x7b}, {@host, 0x1}, 0x400, "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"}, 0x418, 0x3}) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:08 executing program 0: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30020000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fbdbdf252100170008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x230}}, 0x841) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x20000001) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r7}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x9}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x40, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x8}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "9f27c7aeb9"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r8, &(0x7f0000001840)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001800)={&(0x7f00000003c0)={0x1418, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x7e, 0x2a, [@preq={0x82, 0x2b, @ext={{}, 0xff, 0x9, 0x3, @device_b, 0x4b, @device_a, 0x4, 0xbffb, 0x1, [{{0x1, 0x0, 0x1}, @device_a, 0xdea}]}}, @challenge={0x10, 0x1, 0x8}, @mic={0x8c, 0x10, {0x200, "40f389f7b015", @short="911e102e1bb522e7"}}, @preq={0x82, 0x2b, @ext={{0x0, 0x1, 0x1}, 0x7f, 0x4, 0xffffffff, @device_b, 0x4, @broadcast, 0x3, 0x9, 0x1, [{{0x1}, @device_a, 0x1}]}}, @dsss={0x3, 0x1, 0xe}, @mesh_chsw={0x76, 0x6, {0x3f, 0x20, 0x27, 0xb7}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_RRK={0x47, 0xfc, "112692e23381bc9e04d3f15bb0487e9f3ea0a8864a5dfef608aeabad12c57dafc6d4f493b3cf0b44b2046156cf909a6ddd518e7c6d911346d5b0e7b6cbb5cbff4b3afa"}], @NL80211_ATTR_IE={0x51, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @preq={0x82, 0x2b, @ext={{}, 0x9, 0x7f, 0x4, @broadcast, 0x0, @device_a, 0xff, 0x100, 0x1, [{{0x1, 0x0, 0x1}, @device_b, 0x200}]}}, @rann={0x7e, 0x15, {{0x1, 0x32}, 0x4, 0x1, @device_b, 0x8, 0x7, 0x1}}, @chsw_timing={0x68, 0x4, {0x7, 0x7f}}]}, @NL80211_ATTR_IE={0x10, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x0, 0x2, 0xb5, 0x4}}]}, @NL80211_ATTR_IE={0x22b, 0x2a, [@perr={0x84, 0x115, {0x7f, 0x11, [@ext={{}, @device_b, 0x7fffffff, @device_a, 0x1}, @not_ext={{}, @device_a, 0xffff, "", 0x2d}, @not_ext={{}, @broadcast, 0x100, "", 0xb}, @not_ext={{}, @broadcast, 0x6, "", 0x32}, @ext={{}, @device_a, 0x1ff, @broadcast, 0x2b}, @not_ext={{}, @device_b, 0x80, "", 0x3d}, @ext={{}, @device_b, 0x10001, @device_a, 0x9}, @ext={{}, @device_b, 0x1, @device_a, 0x2f}, @ext={{}, @device_a, 0x6, @device_b, 0x3}, @ext={{}, @broadcast, 0x3, @broadcast, 0x4}, @not_ext={{}, @device_a, 0x80, "", 0x19}, @not_ext={{}, @broadcast, 0x3ff, "", 0xe}, @ext={{}, @device_a, 0x8ad, @broadcast, 0x2c}, @ext={{}, @broadcast, 0x6, @broadcast, 0xa}, @ext={{}, @broadcast, 0xfffffffe, @broadcast, 0x8}, @not_ext={{}, @device_a, 0x8, "", 0x32}, @not_ext={{}, @broadcast, 0x8000, "", 0x5}]}}, @rann={0x7e, 0x15, {{0x0, 0x2}, 0x5, 0x3, @broadcast, 0x9, 0x5, 0x80}}, @perr={0x84, 0xb5, {0x80, 0xb, [@not_ext={{}, @broadcast, 0x10000, "", 0x42}, @ext={{}, @device_b, 0x401, @device_a, 0x39}, @ext={{}, @device_a, 0x3ff, @device_a, 0x27}, @not_ext={{}, @device_a, 0xfff, "", 0x16}, @not_ext={{}, @broadcast, 0x6, "", 0x2c}, @not_ext={{}, @broadcast, 0x7f, "", 0x14}, @ext={{}, @device_b, 0x3, @device_a, 0x34}, @ext={{}, @broadcast, 0x7, @device_a, 0x17}, @ext={{}, @broadcast, 0x16, @device_b, 0x22}, @not_ext={{}, @broadcast, 0x5e7, "", 0x20}, @ext={{}, @device_a, 0x8, @broadcast, 0x41}]}}, @chsw_timing={0x68, 0x4, {0x0, 0x2aa}}, @gcr_ga={0xbd, 0x6, @broadcast}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x60, 0x81, 0x4, 0x200}}, @prep={0x83, 0x1f, @not_ext={{}, 0x5, 0x9, @broadcast, 0x6, "", 0x3, 0x4, @broadcast, 0xfffffffa}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_REALM={0x70, 0xfa, "6b153dc70e77f62bb75b315add96e4da4bb1463a23d692709e59f4cdecf614b7bf7d3268a7627bfafab1d534ac317cdadf8b523a13b6c99c5c5553126d0534e577243d37aa501631c5ed71e4f695500bf447bae940cd149f3886aa9ef2c12136ab9697d77b40f3cf68b8c97e"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "8f1e"}], @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @device_b, @device_b}}]}]}, 0x1418}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) 18:56:08 executing program 3: syz_clone(0x44040000, 0x0, 0x8003, 0x0, 0x0, 0x0) 18:56:08 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd700099d4f7000000080003000000", @ANYRES32=r0, @ANYBLOB="0c00990000000000670000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a0006000802110000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048014) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) r1 = io_uring_setup(0x32f3, &(0x7f0000000140)={0x0, 0x9e2f, 0x4, 0x0, 0x258}) syz_io_uring_setup(0x7a62, &(0x7f00000001c0)={0x0, 0xf33f, 0x4, 0x2, 0x180, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000000700)={&(0x7f00000002c0)={{@hyper, 0x7b}, {@host, 0x1}, 0x400, "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"}, 0x418, 0x3}) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:08 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd700099d4f7000000080003000000", @ANYRES32=r0, @ANYBLOB="0c00990000000000670000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a0006000802110000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048014) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) r1 = io_uring_setup(0x32f3, &(0x7f0000000140)={0x0, 0x9e2f, 0x4, 0x0, 0x258}) syz_io_uring_setup(0x7a62, &(0x7f00000001c0)={0x0, 0xf33f, 0x4, 0x2, 0x180, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:08 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r5}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x13}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4008001) setsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000000), 0x4) 18:56:08 executing program 0: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30020000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fbdbdf252100170008000300", @ANYRES32=r2, @ANYBLOB="0c009900000000005b00000010002d800a00000001010101010100000a000600ffffffffffff0000e4012a008c10800047df17c180a54f3deeaf17939b1c37ede20585d6e0ada6bef605bb97df6be29b3f21a8bd2df3b6fbfa65bcfacff6e887d9ff28a63bbe2cf8fe6325db83bcce3f0fbb39e83f20e0d9e0447f4575884db129663d1f9d848ebb14ce054e5ae451279cd80217bd8179175e81bf07a9b9c1665874b6de933e18ac1b861c041ca24d9db469040c6a9c18a24a055bca9c5966bb95168a61c4895ad8ab0118c52af77dfeb80ca9a704b0b0f9b0a4aad16f7c9d5527406803269e1a0a6002e8119c9a206fcd28aeb0682f2acc1e18ba1fbadad497842af5954f432cea831ec301209b5c0887bb84fa4b0ed2da40c4b0f05a94fab00004614775daddb2547c2f08492a01020406403f05003a0d84cf090d0008021100000009000000220040ffffffffffff8ac800000802110000010b0000ffffffffffff09000000050000fffffffffffff7ffffff060040080211000000ffffffff0802110000013a0040ffffffffffff15090000ffffffffffff07000008021100000004000000360040ffffffffffffde940000080211000000120000ffffffffffff05000000150000080211000000030000000a0040080211000001ff0f0000080211000000400000080211000000f37aff13420040ffffffffffffff7fffff0802110000013d003e01030600f70009070000"], 0x230}}, 0x841) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x20000001) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r7}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x9}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x40, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x8}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "9f27c7aeb9"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r8, &(0x7f0000001840)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001800)={&(0x7f00000003c0)={0x1418, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x7e, 0x2a, [@preq={0x82, 0x2b, @ext={{}, 0xff, 0x9, 0x3, @device_b, 0x4b, @device_a, 0x4, 0xbffb, 0x1, [{{0x1, 0x0, 0x1}, @device_a, 0xdea}]}}, @challenge={0x10, 0x1, 0x8}, @mic={0x8c, 0x10, {0x200, "40f389f7b015", @short="911e102e1bb522e7"}}, @preq={0x82, 0x2b, @ext={{0x0, 0x1, 0x1}, 0x7f, 0x4, 0xffffffff, @device_b, 0x4, @broadcast, 0x3, 0x9, 0x1, [{{0x1}, @device_a, 0x1}]}}, @dsss={0x3, 0x1, 0xe}, @mesh_chsw={0x76, 0x6, {0x3f, 0x20, 0x27, 0xb7}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_RRK={0x47, 0xfc, "112692e23381bc9e04d3f15bb0487e9f3ea0a8864a5dfef608aeabad12c57dafc6d4f493b3cf0b44b2046156cf909a6ddd518e7c6d911346d5b0e7b6cbb5cbff4b3afa"}], @NL80211_ATTR_IE={0x51, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @preq={0x82, 0x2b, @ext={{}, 0x9, 0x7f, 0x4, @broadcast, 0x0, @device_a, 0xff, 0x100, 0x1, [{{0x1, 0x0, 0x1}, @device_b, 0x200}]}}, @rann={0x7e, 0x15, {{0x1, 0x32}, 0x4, 0x1, @device_b, 0x8, 0x7, 0x1}}, @chsw_timing={0x68, 0x4, {0x7, 0x7f}}]}, @NL80211_ATTR_IE={0x10, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x0, 0x2, 0xb5, 0x4}}]}, @NL80211_ATTR_IE={0x22b, 0x2a, [@perr={0x84, 0x115, {0x7f, 0x11, [@ext={{}, @device_b, 0x7fffffff, @device_a, 0x1}, @not_ext={{}, @device_a, 0xffff, "", 0x2d}, @not_ext={{}, @broadcast, 0x100, "", 0xb}, @not_ext={{}, @broadcast, 0x6, "", 0x32}, @ext={{}, @device_a, 0x1ff, @broadcast, 0x2b}, @not_ext={{}, @device_b, 0x80, "", 0x3d}, @ext={{}, @device_b, 0x10001, @device_a, 0x9}, @ext={{}, @device_b, 0x1, @device_a, 0x2f}, @ext={{}, @device_a, 0x6, @device_b, 0x3}, @ext={{}, @broadcast, 0x3, @broadcast, 0x4}, @not_ext={{}, @device_a, 0x80, "", 0x19}, @not_ext={{}, @broadcast, 0x3ff, "", 0xe}, @ext={{}, @device_a, 0x8ad, @broadcast, 0x2c}, @ext={{}, @broadcast, 0x6, @broadcast, 0xa}, @ext={{}, @broadcast, 0xfffffffe, @broadcast, 0x8}, @not_ext={{}, @device_a, 0x8, "", 0x32}, @not_ext={{}, @broadcast, 0x8000, "", 0x5}]}}, @rann={0x7e, 0x15, {{0x0, 0x2}, 0x5, 0x3, @broadcast, 0x9, 0x5, 0x80}}, @perr={0x84, 0xb5, {0x80, 0xb, [@not_ext={{}, @broadcast, 0x10000, "", 0x42}, @ext={{}, @device_b, 0x401, @device_a, 0x39}, @ext={{}, @device_a, 0x3ff, @device_a, 0x27}, @not_ext={{}, @device_a, 0xfff, "", 0x16}, @not_ext={{}, @broadcast, 0x6, "", 0x2c}, @not_ext={{}, @broadcast, 0x7f, "", 0x14}, @ext={{}, @device_b, 0x3, @device_a, 0x34}, @ext={{}, @broadcast, 0x7, @device_a, 0x17}, @ext={{}, @broadcast, 0x16, @device_b, 0x22}, @not_ext={{}, @broadcast, 0x5e7, "", 0x20}, @ext={{}, @device_a, 0x8, @broadcast, 0x41}]}}, @chsw_timing={0x68, 0x4, {0x0, 0x2aa}}, @gcr_ga={0xbd, 0x6, @broadcast}, @mesh_id={0x72, 0x6}, @cf={0x4, 0x6, {0x60, 0x81, 0x4, 0x200}}, @prep={0x83, 0x1f, @not_ext={{}, 0x5, 0x9, @broadcast, 0x6, "", 0x3, 0x4, @broadcast, 0xfffffffa}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_REALM={0x70, 0xfa, "6b153dc70e77f62bb75b315add96e4da4bb1463a23d692709e59f4cdecf614b7bf7d3268a7627bfafab1d534ac317cdadf8b523a13b6c99c5c5553126d0534e577243d37aa501631c5ed71e4f695500bf447bae940cd149f3886aa9ef2c12136ab9697d77b40f3cf68b8c97e"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "8f1e"}], @NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @device_b, @device_b}}]}]}, 0x1418}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) 18:56:08 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd700099d4f7000000080003000000", @ANYRES32=r0, @ANYBLOB="0c00990000000000670000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a0006000802110000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048014) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) r1 = io_uring_setup(0x32f3, &(0x7f0000000140)={0x0, 0x9e2f, 0x4, 0x0, 0x258}) syz_io_uring_setup(0x7a62, &(0x7f00000001c0)={0x0, 0xf33f, 0x4, 0x2, 0x180, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, &(0x7f0000000700)={&(0x7f00000002c0)={{@hyper, 0x7b}, {@host, 0x1}, 0x400, "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"}, 0x418, 0x3}) 18:56:08 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd700099d4f7000000080003000000", @ANYRES32=r0, @ANYBLOB="0c00990000000000670000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a0006000802110000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048014) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) io_uring_setup(0x32f3, &(0x7f0000000140)={0x0, 0x9e2f, 0x4, 0x0, 0x258}) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:08 executing program 4: syz_clone(0x44040000, 0x0, 0x2000000, 0x0, 0x0, 0x0) 18:56:08 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @bcast}, 0x1c) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default]}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000280)=@netrom) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x80) r5 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xac, r4, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x1f}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xe4}, @NL80211_ATTR_FILS_ERP_REALM={0x2b, 0xfa, "572cf4364b8e1c007636c9391629197fb5259ac1d2aa74a4b112d2d7d6a6cb196630b70be1d617"}, @NL80211_ATTR_FILS_ERP_RRK={0x4e, 0xfc, "c415d591877a797925704489aacb26ec4f1bc8db32bac81522f247bfde85287264f362eacd5e010881826d754513f7b99ee0970433b50c71b8a1e9485dea46ad395e8c154f242c5e8101"}]]}, 0xac}, 0x1, 0x0, 0x0, 0x20000040}, 0x24044894) 18:56:08 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x1, @null}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r5}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f00000000c0)={0x4c0, r2, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x37}}}}, [@NL80211_PMSR_ATTR_PEERS={0x158, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x134, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x130, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}, @NL80211_PMSR_ATTR_PEERS={0x340, 0x5, 0x0, 0x1, [{0x318, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9c}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x144, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x446e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9973}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xdf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4e}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a6}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3bc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x28, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xf8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe0}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}]}]}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x40004}, 0x80) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:56:08 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd700099d4f7000000080003000000", @ANYRES32=r0, @ANYBLOB="0c00990000000000670000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a0006000802110000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048014) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) r1 = io_uring_setup(0x32f3, &(0x7f0000000140)={0x0, 0x9e2f, 0x4, 0x0, 0x258}) syz_io_uring_setup(0x7a62, &(0x7f00000001c0)={0x0, 0xf33f, 0x4, 0x2, 0x180, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 18:56:08 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd700099d4f7000000080003000000", @ANYRES32=r0, @ANYBLOB="0c00990000000000670000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a0006000802110000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048014) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:08 executing program 3: syz_clone(0x44040000, 0x0, 0x8400, 0x0, 0x0, 0x0) 18:56:08 executing program 0: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r0, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6f}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "fe799ce55510aa1eb1cbd71eb7927d57"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "ce2b052d1faf1e3efffa159fbfa58359"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "43b4f4abe36806391fe806558949f763"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "290e5cc3b234a2eb9fd31ea262c139b1"}]}, 0x88}}, 0x4) 18:56:08 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001100)={&(0x7f0000000100)=[0x8, 0x7fffffff, 0x40, 0x1, 0x0, 0x0, 0x4, 0x228, 0x80000001, 0x7, 0x9, 0x81, 0x24, 0x6, 0x2, 0x7fffffff, 0x1, 0x1cb9, 0x7ff, 0x80000001, 0x4, 0x8001, 0x790, 0xf8000000, 0x41, 0x4, 0x800, 0xffffc7f5, 0x7f, 0x8, 0x3, 0xffff, 0x7, 0xffffffff, 0x4000, 0xffff, 0x3, 0x7, 0x0, 0x8001, 0x3, 0x9, 0xffff, 0x7f, 0x8, 0x8, 0x5, 0x80000001, 0x5, 0x0, 0x2, 0x3, 0x9, 0x1, 0xfffffffb, 0xff3, 0x438, 0x63, 0x7, 0x70e, 0x0, 0x6, 0x200, 0x0, 0x4, 0x6, 0x4, 0xffff, 0x400, 0x4, 0x3, 0xea2b, 0x4137, 0x10001, 0x9, 0x0, 0xbe000, 0x4, 0x1, 0x7fff, 0x4, 0x1, 0x200, 0x101e000, 0x3f, 0x4, 0x1, 0x140, 0x3f, 0x40, 0x7f, 0x100, 0x6, 0xff, 0x1ff, 0x6, 0x5, 0xd07, 0x9, 0x0, 0x8001, 0x4, 0x80, 0x7, 0x1000, 0x81, 0x20, 0x5, 0x8, 0x5, 0x0, 0x5b, 0x2, 0x7, 0x2, 0x6, 0xa8, 0x6, 0x1, 0x8000, 0x1000, 0x10001, 0x401, 0x1, 0x818e, 0x1, 0x96c, 0x58, 0x7, 0x0, 0x3f, 0x3ff, 0x1000, 0x6, 0x4, 0x3, 0x401, 0x8001, 0x12e, 0x1, 0x0, 0x1a19c0, 0x1, 0x4, 0x8, 0x8, 0x7, 0x4, 0x2, 0x1, 0x1, 0x40, 0x2496, 0x8, 0x1, 0x8000, 0x100, 0x9e91, 0x5, 0x0, 0xfffff966, 0x71, 0x6, 0x5, 0x1, 0x8001, 0x9, 0x3, 0x3, 0xdf9, 0x3, 0x40, 0x3f, 0xfffffff7, 0x7, 0x7, 0x3ef, 0x9, 0x6e45407d, 0x10001, 0x7ff, 0x9, 0x3, 0x2, 0x127, 0x7, 0x5, 0x18, 0x1, 0x200, 0x6, 0xff, 0xff, 0x15ca0532, 0x1f, 0x40, 0x1ffc00, 0xff, 0x3, 0x6fc5, 0x3, 0x5, 0xfffffffd, 0x15, 0x200, 0x100, 0x2, 0x4, 0x5, 0x400, 0x7, 0x2, 0x5, 0x8, 0xc3f, 0xaf64, 0x1ff, 0x56294a2d, 0x5e8, 0x8000, 0x4, 0x10000, 0x7c49, 0x10000, 0x8, 0x781a91d6, 0x3, 0x1, 0x2, 0xfffff800, 0x100, 0x1000, 0xfb, 0x2, 0x40, 0xffffff01, 0x4, 0x80, 0x4, 0x6, 0xffffffc0, 0x0, 0x5493, 0x0, 0x7, 0x4, 0xfc9a, 0x7, 0xffffffc0, 0x5, 0x3, 0xd6a, 0x78e7, 0x5, 0x200, 0x155, 0x6, 0x4, 0x4, 0x7fff, 0xfffffff8, 0x20, 0x1000, 0x78a0, 0x6, 0x2, 0x1f, 0x7fffffff, 0x7f, 0xd4ce, 0x7fffffff, 0x0, 0x5, 0x7, 0x7, 0x9, 0xd3, 0x1, 0xdce, 0x1, 0xe1f, 0x9, 0x1f, 0x1, 0x3ff, 0x7ff, 0x10001, 0x27fa, 0xe0be, 0x8000, 0x5, 0x0, 0x2, 0xff, 0x3f, 0x5, 0x9, 0x9, 0x3, 0xfffffffb, 0xa0, 0x200, 0xb679, 0xc0, 0x1, 0x9, 0x7, 0x7, 0x0, 0x62, 0xffff, 0x3f, 0xffffffff, 0x6f, 0x0, 0x7ff, 0x0, 0x7d0, 0x3, 0x8, 0x9f, 0x30dd, 0x49f, 0x7869, 0x10001, 0x9, 0x9, 0x5, 0x3ff, 0xcb, 0x8, 0x1, 0x8, 0x1, 0x80, 0xffff, 0x400, 0x7, 0xffffff00, 0x7, 0x2, 0x101, 0x9, 0x1, 0x8, 0x0, 0x8, 0x3f, 0xfffffff8, 0x6, 0x5, 0x10001, 0x6, 0x7, 0xfff, 0x8, 0x75e0, 0x1, 0x3, 0x0, 0x7, 0x7fffffff, 0x9, 0x200, 0x1, 0x10001, 0x80000001, 0x8000, 0x5, 0xc0000, 0x8001, 0xd3, 0x4, 0x8001, 0x7, 0xe585, 0x5, 0x3, 0x11, 0x7fffffff, 0x8, 0xffff0000, 0x20, 0xf5c6, 0x3f, 0x0, 0x3, 0x2, 0x7, 0x6, 0x1, 0x71be, 0xb74, 0x8001, 0x6, 0x4, 0x80000001, 0x2, 0x5, 0x1, 0x0, 0x431, 0x3, 0x5, 0x7f, 0x9, 0x2, 0x1, 0x0, 0x10000, 0xc500, 0x0, 0x0, 0x7, 0x8, 0x356, 0x1, 0x1000, 0x2, 0xe0000000, 0xd1, 0x9, 0x5, 0x400, 0x3, 0x2, 0x4b52, 0x7ff, 0xfff, 0x0, 0x1f, 0x9, 0xef, 0x7fffffff, 0x7f, 0x401, 0x0, 0x9, 0x1000, 0x8, 0x0, 0x9, 0x4, 0x1, 0x4, 0x2, 0xfef3, 0x40, 0x9, 0x0, 0x7, 0x6, 0x40, 0x5, 0xffffffff, 0x3f865e1b, 0x37, 0x0, 0x7, 0x9, 0x3ff, 0x8000, 0x10001, 0xfffffffa, 0x3, 0xffffffff, 0x7, 0xaae1, 0x7, 0x63c, 0x401, 0x9, 0x8, 0xd2, 0x30000000, 0x8, 0xfffffff9, 0x4, 0x8, 0x3, 0xe05, 0x6c5, 0x80000001, 0x6, 0x80000001, 0x1f, 0x9, 0x29fd, 0x5, 0x401, 0x7f, 0x2, 0x1000, 0x33, 0x6, 0x3, 0x7, 0x1, 0xbaa, 0x8d, 0xba, 0x40000, 0x400, 0x40, 0x10001, 0x2, 0x4, 0x400, 0x80000001, 0x4, 0x8, 0x2, 0x9f2c, 0x9, 0x8, 0x6, 0x9, 0x3, 0x9, 0xaa, 0x6, 0x20, 0x9, 0x0, 0x9, 0x8, 0xa9, 0xfff, 0x38, 0x1, 0x7, 0x2, 0x7, 0xfffffffa, 0x3, 0x3, 0x3, 0x4, 0x1, 0x2, 0x7f, 0x9, 0x7f, 0x7bd2c581, 0x2, 0x3, 0x0, 0x7eb, 0x0, 0x7, 0xdf, 0x93, 0x7, 0x3, 0x5, 0x0, 0x800, 0x3, 0x8, 0x5, 0x4, 0x80000000, 0x5, 0xffffa57a, 0x6, 0x20, 0x5, 0x5, 0x7ff, 0x7f, 0x1, 0x7, 0x3, 0x6, 0xff, 0xfffffffc, 0x10001, 0x8, 0x3, 0x2, 0x400, 0x1, 0x5, 0x80000001, 0x3, 0x4ef18abf, 0x4, 0xe724, 0x7ff, 0x6, 0x200, 0x1, 0x4, 0xff, 0x6, 0x1ff, 0xaf, 0x61f, 0x5, 0x3f, 0x8, 0xfffffffa, 0xab, 0x8, 0x3, 0x8, 0x1, 0x7fffffff, 0x2, 0x8, 0x9, 0x5, 0x3652, 0x800, 0x7, 0x3, 0x3, 0xffffff81, 0x8, 0x40000000, 0xdbf, 0x3, 0x2, 0x8, 0x2, 0x200, 0x8001, 0x2, 0x3, 0xfff, 0x8eb, 0x2, 0x5, 0xa0, 0x0, 0x0, 0x0, 0x4, 0x6, 0x4, 0x5, 0x2, 0xff, 0x0, 0x717b3571, 0x3f, 0x80000001, 0x9874, 0x1, 0x9a2, 0x80000000, 0x2, 0x7fffffff, 0x1, 0x3, 0x6, 0x40, 0xfffeffff, 0x1, 0x8, 0xab, 0x8, 0x81, 0x9, 0x3, 0x0, 0x5, 0x38a7e703, 0x70c, 0x10001, 0x0, 0x1ff, 0x0, 0x81, 0x12, 0x0, 0x20, 0x6, 0x800, 0x5, 0x7f, 0x1, 0xb11, 0x200, 0x6, 0x654, 0x5, 0x8, 0x5a58, 0x100, 0x3, 0x0, 0x7fff, 0xfff, 0x1, 0x5, 0xfffffff8, 0x7, 0xff, 0x5, 0x8, 0x8, 0x6, 0x7, 0x9, 0x0, 0x8001, 0x0, 0x3f, 0x4, 0x7f, 0x6, 0x6, 0x100, 0x6, 0x7, 0x613150dc, 0x6, 0x62be, 0x700, 0x9, 0x0, 0x3, 0xb4c, 0x7ff, 0x0, 0x67e, 0x5, 0x8, 0x400, 0x6, 0x9, 0x1f, 0x0, 0x0, 0x2, 0x1f, 0x10000, 0x1ff, 0xffffffff, 0x1ff, 0x591, 0x1000, 0x8, 0x627, 0x1, 0x5b77, 0x1f, 0x236c, 0x800, 0x0, 0x7fff, 0xffffffbc, 0xb70, 0xfffffff7, 0x9, 0x0, 0x9, 0x3f, 0x7, 0x7fffffff, 0x0, 0x40, 0xb316, 0x7, 0xfff, 0x398, 0x7, 0x8, 0xe709, 0x14000, 0x1000, 0x80000000, 0x101, 0xfffffff9, 0x3, 0x3, 0x120000, 0xffff846f, 0x5, 0x1, 0xff, 0x8b6, 0x1, 0x80, 0x1f, 0x80, 0x7, 0x8, 0x6, 0x8, 0xff, 0x3f, 0x0, 0x3f, 0x0, 0x6, 0x8, 0x3, 0x9, 0x0, 0x3ff, 0x101, 0x2, 0x7, 0x0, 0x4, 0x0, 0x20, 0x47b, 0x9, 0x3f, 0x9, 0xff, 0x401, 0x6, 0x8, 0xc17e, 0x7fffffff, 0x9, 0x3, 0x5, 0x3ff, 0x8000, 0x5, 0x400, 0xd4b, 0x3, 0x29f, 0x5, 0x7f, 0xff, 0x1faa, 0xfc3, 0x3, 0x5, 0x1, 0x6, 0xffff, 0x1, 0xfffffffc, 0x7fff, 0x3ff, 0xa4, 0x0, 0x0, 0x40, 0x1000000, 0x5, 0x81, 0x6, 0x7, 0xbb7b, 0xd57e, 0x81, 0x9, 0x9, 0x80000001, 0x6, 0x8001, 0x7, 0x3, 0x64b29ad0, 0x1, 0x8, 0xffffffff, 0xbc8, 0xffffffff, 0x1, 0x0, 0x1, 0x1, 0x1, 0x7, 0xed0d, 0x7ff, 0x2d, 0x9, 0x81, 0x38edc00, 0x4, 0x7ff, 0x2, 0x800, 0x89b, 0x4, 0x80000000, 0x1ff, 0x1ff, 0xb59, 0x7, 0x6, 0x8, 0x7, 0x0, 0x1, 0xf020, 0x9, 0x0, 0x8d3, 0xd68, 0x9, 0x20, 0x80000001, 0x0, 0x6, 0x39ff, 0xffffffff, 0x5, 0x164, 0x9, 0x9, 0x3, 0xfffffff7, 0x30000000, 0x1f, 0x8000, 0x7fff, 0x8, 0x9de, 0xca, 0x7, 0x4, 0x81, 0x8d98, 0x0, 0x9, 0x2be, 0xffffffff, 0x3, 0x7, 0x9, 0x6, 0x7, 0xc0b, 0x10001, 0xb3, 0x4, 0x200, 0x40000, 0x9, 0x6, 0xa0, 0x45d7, 0x0, 0x0, 0x5, 0x9, 0x81, 0xd51, 0x1, 0x6, 0xa7, 0x5, 0x8, 0x2d, 0x6, 0x0, 0x6ef, 0x2, 0x48000000, 0x4, 0x65, 0x1, 0x40, 0x0, 0x10000, 0x3, 0x729, 0x10001, 0x5, 0x5, 0x7fff, 0x0, 0x9, 0x7, 0x8001, 0x2, 0x2, 0x8, 0x8, 0xfff, 0x400, 0x1, 0xfe, 0x262, 0x6, 0x7f, 0x0, 0x100, 0x0, 0x3, 0xfff, 0x3f, 0x9, 0xbb, 0x7b, 0x9, 0x0, 0x3, 0x80000000, 0x9, 0x0, 0x8001, 0x8, 0x20, 0x6, 0x2, 0x1000, 0x4, 0xffff, 0x10040000, 0x6a4, 0x9, 0x2, 0x66, 0x6, 0x9, 0x4, 0x7ff, 0xff, 0x80000001, 0x4, 0x1ff], 0x6, 0x400, 0xffff5752}) bind$rose(0xffffffffffffffff, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x0, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @null]}, 0x40) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000000)) 18:56:08 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd700099d4f7000000080003000000", @ANYRES32=r0, @ANYBLOB="0c00990000000000670000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a0006000802110000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048014) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:08 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd700099d4f7000000080003000000", @ANYRES32=r0, @ANYBLOB="0c00990000000000670000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a0006000802110000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048014) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) io_uring_setup(0x32f3, &(0x7f0000000140)={0x0, 0x9e2f, 0x4, 0x0, 0x258}) 18:56:08 executing program 0: syz_clone(0x44040000, 0x0, 0x8003, 0x0, 0x0, 0x0) 18:56:08 executing program 5: socketpair(0x1, 0x3, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080), 0x4) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x383101, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r1) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, r5, 0x100, 0x70bd2a, 0x25dfdbf9, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x0, 0x9, 0x1000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x59}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4880) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r4, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7000000, 0x5a}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x58}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x80800) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000180)) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x9}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xfe}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000010) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f00000000c0)=0xff, 0x4) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r8, 0x104, 0x4, &(0x7f0000000000), 0x4) 18:56:08 executing program 4: syz_clone(0x44040000, 0x0, 0x7000000, 0x0, 0x0, 0x0) 18:56:08 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd700099d4f7000000080003000000", @ANYRES32=r0, @ANYBLOB="0c00990000000000670000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a0006000802110000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048014) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) 18:56:08 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:08 executing program 5: setsockopt$rose(0xffffffffffffffff, 0x104, 0x7, &(0x7f0000000040)=0xc98, 0x4) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) 18:56:08 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:08 executing program 3: syz_clone(0x44040000, 0x0, 0x8601, 0x0, 0x0, 0x0) 18:56:08 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd700099d4f7000000080003000000", @ANYRES32=r0, @ANYBLOB="0c00990000000000670000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a0006000802110000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048014) 18:56:08 executing program 5: syz_clone(0x44040000, 0x0, 0x2000000, 0x0, 0x0, 0x0) 18:56:08 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:09 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:09 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x81}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1000}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc000}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x814) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:56:09 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) 18:56:09 executing program 4: syz_clone(0x44040000, 0x0, 0x8000000, 0x0, 0x0, 0x0) 18:56:09 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:09 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) 18:56:09 executing program 0: syz_clone(0x44040000, 0x0, 0x7000000, 0x0, 0x0, 0x0) 18:56:09 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:09 executing program 3: syz_clone(0x44040000, 0x0, 0x8b02, 0x0, 0x0, 0x0) 18:56:09 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) 18:56:09 executing program 5: syz_clone(0x44040000, 0x0, 0x8000000, 0x0, 0x0, 0x0) 18:56:09 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:09 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) 18:56:09 executing program 4: syz_clone(0x44040000, 0x0, 0x8030000, 0x0, 0x0, 0x0) 18:56:09 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) 18:56:09 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:09 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) 18:56:09 executing program 0: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:09 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) 18:56:09 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:09 executing program 3: syz_clone(0x44040000, 0x0, 0x9001, 0x0, 0x0, 0x0) 18:56:09 executing program 0: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:09 executing program 5: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x94f636ee) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x19, 0x1}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='\x00', 0x0, 0x10}, 0x10) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000000), 0x4) recvmsg$kcm(r0, &(0x7f0000001500)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000001200)=""/224, 0xe0}, {&(0x7f0000001300)=""/236, 0xec}], 0x4, &(0x7f0000001440)=""/132, 0x84}, 0x10022) 18:56:09 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) 18:56:09 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:09 executing program 4: syz_clone(0x44040000, 0x0, 0xe030000, 0x0, 0x0, 0x0) 18:56:09 executing program 0: syz_clone(0x44040000, 0x0, 0x8b02, 0x0, 0x0, 0x0) 18:56:09 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) 18:56:09 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:10 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:10 executing program 5: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x94f636ee) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x19, 0x1}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='\x00', 0x0, 0x10}, 0x10) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000000), 0x4) recvmsg$kcm(r0, &(0x7f0000001500)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000001200)=""/224, 0xe0}, {&(0x7f0000001300)=""/236, 0xec}], 0x4, &(0x7f0000001440)=""/132, 0x84}, 0x10022) 18:56:10 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) 18:56:10 executing program 3: syz_clone(0x44040000, 0x0, 0x9600, 0x0, 0x0, 0x0) 18:56:10 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:10 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) 18:56:10 executing program 5: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x94f636ee) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x19, 0x1}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='\x00', 0x0, 0x10}, 0x10) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000000), 0x4) recvmsg$kcm(r0, &(0x7f0000001500)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000001200)=""/224, 0xe0}, {&(0x7f0000001300)=""/236, 0xec}], 0x4, &(0x7f0000001440)=""/132, 0x84}, 0x10022) 18:56:10 executing program 4: syz_clone(0x44040000, 0x0, 0x10000200, 0x0, 0x0, 0x0) 18:56:10 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:10 executing program 0: syz_clone(0x44040000, 0x0, 0x9001, 0x0, 0x0, 0x0) 18:56:10 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 18:56:10 executing program 5: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x94f636ee) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x19, 0x1}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='\x00', 0x0, 0x10}, 0x10) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000000), 0x4) 18:56:10 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 18:56:10 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x26ce, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:10 executing program 5: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x94f636ee) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x19, 0x1}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='\x00', 0x0, 0x10}, 0x10) 18:56:10 executing program 3: syz_clone(0x44040000, 0x0, 0x9a01, 0x0, 0x0, 0x0) 18:56:10 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 18:56:10 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6b1, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:10 executing program 5: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x94f636ee) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x19, 0x1}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='\x00', 0x0, 0x10}, 0x10) 18:56:10 executing program 4: syz_clone(0x44040000, 0x0, 0x11000000, 0x0, 0x0, 0x0) 18:56:10 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6b1, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:10 executing program 0: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x94f636ee) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x19, 0x1}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='\x00', 0x0, 0x10}, 0x10) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000000), 0x4) recvmsg$kcm(r0, &(0x7f0000001500)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000001200)=""/224, 0xe0}, {&(0x7f0000001300)=""/236, 0xec}], 0x4, &(0x7f0000001440)=""/132, 0x84}, 0x10022) 18:56:10 executing program 5: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x94f636ee) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x19, 0x1}) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='\x00', 0x0, 0x10}, 0x10) 18:56:10 executing program 1: syz_clone(0x44040000, 0x0, 0x10000200, 0x0, 0x0, 0x0) 18:56:10 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6b1, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:10 executing program 5: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x94f636ee) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='\x00', 0x0, 0x10}, 0x10) 18:56:10 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:11 executing program 3: syz_clone(0x44040000, 0x0, 0x9a03, 0x0, 0x0, 0x0) 18:56:11 executing program 0: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x94f636ee) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x19, 0x1}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='\x00', 0x0, 0x10}, 0x10) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000000), 0x4) recvmsg$kcm(r0, &(0x7f0000001500)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000001200)=""/224, 0xe0}, {&(0x7f0000001300)=""/236, 0xec}], 0x4, &(0x7f0000001440)=""/132, 0x84}, 0x10022) 18:56:11 executing program 5: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x94f636ee) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='\x00', 0x0, 0x10}, 0x10) 18:56:11 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:11 executing program 4: syz_clone(0x44040000, 0x0, 0x1c010000, 0x0, 0x0, 0x0) 18:56:11 executing program 5: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x94f636ee) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='\x00', 0x0, 0x10}, 0x10) 18:56:11 executing program 0: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x94f636ee) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x19, 0x1}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='\x00', 0x0, 0x10}, 0x10) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000000), 0x4) recvmsg$kcm(r0, &(0x7f0000001500)={&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000001200)=""/224, 0xe0}, {&(0x7f0000001300)=""/236, 0xec}], 0x4, &(0x7f0000001440)=""/132, 0x84}, 0x10022) 18:56:11 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:18 executing program 1: syz_clone(0x44040000, 0x0, 0x10000200, 0x0, 0x0, 0x0) 18:56:18 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='\x00', 0x0, 0x10}, 0x10) 18:56:18 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6b1, &(0x7f0000000040), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:18 executing program 0: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x94f636ee) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x19, 0x1}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='\x00', 0x0, 0x10}, 0x10) setsockopt$rose(r1, 0x104, 0x4, &(0x7f0000000000), 0x4) 18:56:18 executing program 4: syz_clone(0x44040000, 0x0, 0x1e000000, 0x0, 0x0, 0x0) 18:56:18 executing program 3: syz_clone(0x44040000, 0x0, 0x9c03, 0x0, 0x0, 0x0) 18:56:18 executing program 5: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 18:56:18 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6b1, &(0x7f0000000040), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000100)) 18:56:18 executing program 0: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x94f636ee) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x19, 0x1}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='\x00', 0x0, 0x10}, 0x10) 18:56:18 executing program 5: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 18:56:18 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6b1, &(0x7f0000000040), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000100)) 18:56:18 executing program 0: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x94f636ee) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x19, 0x1}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) syz_init_net_socket$rose(0xb, 0x5, 0x0) 18:56:18 executing program 5: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 18:56:18 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6b1, &(0x7f0000000040), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000100)) 18:56:18 executing program 0: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x94f636ee) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x19, 0x1}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x5) 18:56:18 executing program 4: syz_clone(0x44040000, 0x0, 0x1f000000, 0x0, 0x0, 0x0) 18:56:18 executing program 1: syz_clone(0x44040000, 0x0, 0x9c03, 0x0, 0x0, 0x0) 18:56:18 executing program 3: syz_clone(0x44040000, 0x0, 0xa003, 0x0, 0x0, 0x0) 18:56:18 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6b1, &(0x7f0000000040), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), 0x0) 18:56:18 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x10}, 0x10) 18:56:18 executing program 0: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x94f636ee) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x19, 0x1}) 18:56:18 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x10}, 0x10) 18:56:18 executing program 0: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x94f636ee) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:18 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6b1, &(0x7f0000000040), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), 0x0) 18:56:18 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x10}, 0x10) 18:56:18 executing program 0: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x94f636ee) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 18:56:18 executing program 2: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6b1, &(0x7f0000000040), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), 0x0) 18:56:18 executing program 4: syz_clone(0x44040000, 0x0, 0x1ffff000, 0x0, 0x0, 0x0) 18:56:19 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6b1, &(0x7f0000000040), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), 0x0) 18:56:19 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='\x00'}, 0x10) 18:56:19 executing program 0: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x94f636ee) 18:56:19 executing program 3: syz_clone(0x44040000, 0x0, 0xa08b, 0x0, 0x0, 0x0) 18:56:19 executing program 2: syz_clone(0x44040000, 0x0, 0xa003, 0x0, 0x0, 0x0) 18:56:19 executing program 5: syz_clone(0x44040000, 0x0, 0x9a03, 0x0, 0x0, 0x0) 18:56:19 executing program 0: syz_clone(0x44040000, 0x0, 0x11000000, 0x0, 0x0, 0x0) 18:56:19 executing program 1: setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x6b1, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x1, 0x20c}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 18:56:19 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000000)=@bcast) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:56:19 executing program 1: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r4, 0x827, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e65a2700", @ANYRES16=r6, @ANYBLOB="000329bd7000fedbdf25100000000c009900"/32], 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x440c4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) r7 = syz_io_uring_complete(0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2, r3}) 18:56:19 executing program 4: syz_clone(0x44040000, 0x0, 0x20000000, 0x0, 0x0, 0x0) 18:56:19 executing program 1: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r4, 0x827, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e65a2700", @ANYRES16=r6, @ANYBLOB="000329bd7000fedbdf25100000000c009900"/32], 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x440c4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) r7 = syz_io_uring_complete(0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2, r3}) 18:56:19 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x14f, @default, @netrom={'nr', 0x0}, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x100, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x6, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x400000) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f0000000240), 0x4, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e24, @rand_addr=0x64010100}}}, 0xa0) ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000000)) 18:56:19 executing program 3: syz_clone(0x44040000, 0x0, 0xae02, 0x0, 0x0, 0x0) 18:56:19 executing program 1: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r4, 0x827, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e65a2700", @ANYRES16=r6, @ANYBLOB="000329bd7000fedbdf25100000000c009900"/32], 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x440c4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) r7 = syz_io_uring_complete(0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r2, r3}) 18:56:19 executing program 2: syz_clone(0x44040000, 0x0, 0xa08b, 0x0, 0x0, 0x0) 18:56:19 executing program 5: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000240)={0x4d0, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4f87, 0x16}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x42c, 0x33, @auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x9, 0x2}}, @ver_80211n={0x0, 0x20, 0x3, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x1, 0x4, 0x22, @void, [{0xdd, 0xa1, "75769d81e5e6dfa3a65080fbac3bb371430cf1910015d92967196ecc48c65504f57857de63ba4d2785efaf562afad2cfd31ca6371b25e7994d4caaa68fe18b78619e1a4be320bf8231e8d2f263563f7892aaf384d0812b8a17edb8b640bf80d12e183c3539a6631e33808fce4b3ae68b4784b0633d66dd77319bd225bb0cb6cf5c424d64e506fc9588477b46d87eebc4d53a86764cdc3f2e1d9682089eec3a45cf"}, {0xdd, 0xc, "a5884995ea074e1a294c50e1"}, {0xdd, 0xbb, "a57b2a35438510f78acf059ee9be29ccdf4c63f6e66a1f848956f950922dbbe5e4cda6ebcb8c9a2d1ecde2994b2dbe75e8c0eb01be81f071abcdb4dfc7871339bbaf46a41c574487e79dc95d6613354657e1fd2ea55b75890781885f73edcaf3133297aeb3088d201476113dcfa15e4dde69d15ef969db2300a07e4be016bed3f2f90b69da0f65f56968b91e154ee346d8e113c86898ca117ac3c7d5df9f470c88385f6fceac788c8078b6b927a5e38728b28f946340d06b0b0876"}, {0xdd, 0xe5, "973a4323d49b2b7f578cd51b99753beb97a8998643a43c15d97c99813f30367838a2459316d72537e3aeffc15c1fa2d2ef0ddf2e801c43a7c7d34f6030da2975e0e37775638ca7249e26204f27f978dcffdaff4b1e4ab294c20d00115c71f70ba42fd9e8590fed9fdbd4fc155c44989fe053e40e0801cbdaa347ab8cb7ba6b0b5bcc56ad263db4f58b4cd8d2ac678769320fd116007b2e13803d637a6cd5773b18c1664883eaaa5490d8c871f34846f2fac8e5f3ed9df3343a039b8d682c34dbd70e564520028698e7b72e3a8314a97f4265175e4f432020bc56766df55cbe3b5136f2192f"}, {0xdd, 0x80, "22a4aba1a5cb4a563cc9f16e1802151f2c7339bb2b27fd349675873e8bb8fb7daf9db3d15d7b0f957e769efe70fb211a2fadb7cfed68485892cec3bf6eddf288bf800b7a0cb792d4938485655298080d0ad5125601d4b24cc573dd605a0a34305f7d130ee1010942b2161d1dd982bf27b36d715a36b341fc8c62176628957b4e"}, {0xdd, 0x7c, "0dc82ccd39590814e0e4ee97341b21ad7b00201ad32657a0c14e361e625dabe598c7fc8913b0c971dff7bb27bb44a67524228d43ae3dd88afb4b43013e0a0a0c68195594a008f80dc93e6954c9d8192fc1c1857602d8de968cdeb92a8d6259d07e26b459f250c0ce4246de8477099285e3194b9bbdb9fd155e026b9a"}, {0xdd, 0xaf, "f33fcb5b70f381a817f048d47b739e2a26330119b8154950fc891dcc0ba24041e94bf8fbc95b8275de589c8522d7a0af3d321d3e91cd69716fa9674a0a8610981670ee03b72c9f6ab0d788d775bd9a3a43d34fec56d9e11bbce5d42145809a8a4dc810297a96d3ed256df5bd4a049c6b868a28ff28a17df639f1b9040116b389880bd0729fd9a426e95a0b64ab54ca0069083efea506dc9e9c2bb709267ae31ae3099aa2f209e0058520de91dee635"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3dc}]]}, 0x4d0}, 0x1, 0x0, 0x0, 0x20000001}, 0x200400d0) socketpair(0x25, 0x2, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000007c0)={0x7}, 0x4) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa4, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_OBJ_USERDATA={0xe, 0x8, "f16dcc5bf7d5e54097a6"}, @NFTA_OBJ_USERDATA={0x3c, 0x8, "e52903297f31f97f92daf250850061d7290b1ab210f7dabf4305447ca3d454f3bae6216cd466d6d0b50b108655aced5767205912c769b30f"}, @NFTA_OBJ_USERDATA={0x44, 0x8, "f1aaa5e4f1b59a90080238c61f8d403aab4858d9709520548e50ed574f40dd7da8ee3890ea557d75b0b2c8d365e6cf937b65011c301a41edd7d0492040740a91"}]}, 0xa4}}, 0x85) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000b00)={r2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r10}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xa4, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x46}}}}, [@NL80211_ATTR_KEY_SEQ={0x7, 0xa, "daa8e8"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0xa4}}, 0x48085) 18:56:19 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x178, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x30f}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x4, 0x7, 0x9, 0x9, 0x3]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xe6, 0xbe, "2e44d1224ec8456b6a550dba8e7dfa5ebb680198f4077bea722dc9f591a6073b96ea5c8f8d154fd3d4eaca48801f0278c43e8710982314d0d959c1e88b49c22be424b1e754cbd9f7f64d91ba309566d14658c5b4777c825204b9258a299d4014e4741b8a1503467e9351f593d539f7a0b38e81f1e391aac5d975dbe138c1faad183496cd86fe81f59f16a782973a68b87e023ee11a49737f84e523d353cf2e9eeb49789adbc37f9417fc7d3790bfdd21291a2cd80032c1fe06de331298b49ff66900e2aebea36708d85d5cfbf1552824939ba58482ee502f448900db7d4fac827bae"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xec6d}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xbc}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}]}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x212}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8841) 18:56:19 executing program 1: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r2, 0x827, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e65a2700", @ANYRES16=r4, @ANYBLOB="000329bd7000fedbdf25100000000c009900"/32], 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x440c4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) 18:56:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040086}, 0x4004000) 18:56:20 executing program 4: syz_clone(0x44040000, 0x0, 0x24000000, 0x0, 0x0, 0x0) 18:56:20 executing program 0: syz_clone(0x44040000, 0x0, 0x20000000, 0x0, 0x0, 0x0) 18:56:20 executing program 1: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r2, 0x827, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e65a2700", @ANYRES16=r4, @ANYBLOB="000329bd7000fedbdf25100000000c009900"/32], 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x440c4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) syz_io_uring_complete(0x0) 18:56:20 executing program 3: syz_clone(0x44040000, 0x0, 0xb602, 0x0, 0x0, 0x0) 18:56:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040086}, 0x4004000) 18:56:20 executing program 1: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r2, 0x827, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e65a2700", @ANYRES16=r4, @ANYBLOB="000329bd7000fedbdf25100000000c009900"/32], 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x440c4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040086}, 0x4004000) 18:56:20 executing program 2: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r2, 0x827, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x808}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e65a2700", @ANYRES16=r4, @ANYBLOB="000329bd7000fedbdf25100000000c009900"/32], 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x440c4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) r5 = syz_io_uring_complete(0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) 18:56:20 executing program 1: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x827, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:20 executing program 5: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040086}, 0x4004000) 18:56:20 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x6e2a4da7f90832f7, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40040) 18:56:20 executing program 1: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x827, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:20 executing program 4: syz_clone(0x44040000, 0x0, 0x2c010000, 0x0, 0x0, 0x0) 18:56:20 executing program 0: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x827, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:20 executing program 5: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040086}, 0x4004000) 18:56:20 executing program 3: syz_clone(0x44040000, 0x0, 0xbc00, 0x0, 0x0, 0x0) 18:56:20 executing program 2: syz_clone(0x44040000, 0x0, 0x24000000, 0x0, 0x0, 0x0) 18:56:20 executing program 1: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x827, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:20 executing program 5: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040086}, 0x4004000) 18:56:20 executing program 1: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x827, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:20 executing program 0: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x827, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:20 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040086}, 0x4004000) 18:56:20 executing program 1: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:20 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040086}, 0x4004000) 18:56:21 executing program 4: syz_clone(0x44040000, 0x0, 0x2e030000, 0x0, 0x0, 0x0) 18:56:21 executing program 0: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x827, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:21 executing program 1: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:21 executing program 3: syz_clone(0x44040000, 0x0, 0xc202, 0x0, 0x0, 0x0) 18:56:21 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040086}, 0x4004000) 18:56:21 executing program 0: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x827, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:21 executing program 1: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:21 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) accept4$rose(r1, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@rose, @null, @remote, @null, @null, @default]}, &(0x7f00000000c0)=0x40, 0x80000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) syz_io_uring_complete(0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, 0x0, 0x25, 0x2}, 0x10) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:56:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, 0x0, 0x4004000) 18:56:21 executing program 0: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x827, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:21 executing program 1: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, 0x0, 0x4004000) 18:56:21 executing program 4: syz_clone(0x44040000, 0x0, 0x34020000, 0x0, 0x0, 0x0) 18:56:21 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) accept4$rose(r1, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@rose, @null, @remote, @null, @null, @default]}, &(0x7f00000000c0)=0x40, 0x80000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) syz_io_uring_complete(0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, 0x0, 0x25, 0x2}, 0x10) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:56:21 executing program 0: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:21 executing program 3: syz_clone(0x44040000, 0x0, 0xc403, 0x0, 0x0, 0x0) 18:56:21 executing program 1: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, 0x0, 0x4004000) 18:56:21 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) accept4$rose(r1, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@rose, @null, @remote, @null, @null, @default]}, &(0x7f00000000c0)=0x40, 0x80000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) syz_io_uring_complete(0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, 0x0, 0x25, 0x2}, 0x10) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:56:21 executing program 0: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040086}, 0x4004000) 18:56:21 executing program 1: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:21 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@rose, @null, @remote, @null, @null, @default]}, &(0x7f00000000c0)=0x40, 0x80000) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) syz_io_uring_complete(0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, 0x0, 0x25, 0x2}, 0x10) 18:56:21 executing program 0: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:21 executing program 4: syz_clone(0x44040000, 0x0, 0x35000000, 0x0, 0x0, 0x0) 18:56:21 executing program 1: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040086}, 0x4004000) 18:56:21 executing program 3: syz_clone(0x44040000, 0x0, 0xc603, 0x0, 0x0, 0x0) 18:56:21 executing program 0: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:21 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@rose, @null, @remote, @null, @null, @default]}, &(0x7f00000000c0)=0x40, 0x80000) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) syz_io_uring_complete(0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 18:56:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040086}, 0x4004000) 18:56:21 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:22 executing program 0: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040086}, 0x4004000) 18:56:22 executing program 1: openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:22 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@rose, @null, @remote, @null, @null, @default]}, &(0x7f00000000c0)=0x40, 0x80000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) syz_io_uring_complete(0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 18:56:22 executing program 4: syz_clone(0x44040000, 0x0, 0x35010000, 0x0, 0x0, 0x0) 18:56:22 executing program 0: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:22 executing program 1: openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:22 executing program 3: syz_clone(0x44040000, 0x0, 0xc903, 0x0, 0x0, 0x0) 18:56:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040086}, 0x4004000) 18:56:22 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@rose, @null, @remote, @null, @null, @default]}, &(0x7f00000000c0)=0x40, 0x80000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 18:56:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040086}, 0x4004000) 18:56:22 executing program 0: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:22 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@rose, @null, @remote, @null, @null, @default]}, &(0x7f00000000c0)=0x40, 0x80000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 18:56:22 executing program 1: openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040086}, 0x4004000) 18:56:22 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:22 executing program 4: syz_clone(0x44040000, 0x0, 0x38000000, 0x0, 0x0, 0x0) 18:56:22 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:22 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@rose, @null, @remote, @null, @null, @default]}, &(0x7f00000000c0)=0x40, 0x80000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 18:56:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x0, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040086}, 0x4004000) 18:56:22 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) 18:56:22 executing program 3: syz_clone(0x44040000, 0x0, 0xce03, 0x0, 0x0, 0x0) 18:56:22 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) 18:56:22 executing program 0: openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x0, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040086}, 0x4004000) 18:56:22 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@rose, @null, @remote, @null, @null, @default]}, &(0x7f00000000c0)=0x40, 0x80000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 18:56:23 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) 18:56:23 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@rose, @null, @remote, @null, @null, @default]}, &(0x7f00000000c0)=0x40, 0x80000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 18:56:23 executing program 4: syz_clone(0x44040000, 0x0, 0x38020000, 0x0, 0x0, 0x0) 18:56:23 executing program 0: openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x0, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040086}, 0x4004000) 18:56:23 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@rose, @null, @remote, @null, @null, @default]}, &(0x7f00000000c0)=0x40, 0x80000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 18:56:23 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x0, 0x0) 18:56:23 executing program 3: syz_clone(0x44040000, 0x0, 0xd203, 0x0, 0x0, 0x0) 18:56:23 executing program 1: syz_clone(0x44040000, 0x0, 0x38000000, 0x0, 0x0, 0x0) 18:56:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040086}, 0x4004000) 18:56:23 executing program 0: openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:23 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@rose, @null, @remote, @null, @null, @default]}, &(0x7f00000000c0)=0x40, 0x80000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 18:56:23 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@rose, @null, @remote, @null, @null, @default]}, &(0x7f00000000c0)=0x40, 0x80000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 18:56:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040086}, 0x4004000) 18:56:23 executing program 4: syz_clone(0x44040000, 0x0, 0x3c020000, 0x0, 0x0, 0x0) 18:56:23 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040086}, 0x4004000) 18:56:23 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@rose, @null, @remote, @null, @null, @default]}, &(0x7f00000000c0)=0x40, 0x80000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 18:56:23 executing program 3: syz_clone(0x44040000, 0x0, 0xd602, 0x0, 0x0, 0x0) 18:56:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040086}, 0x4004000) 18:56:23 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@rose, @null, @remote, @null, @null, @default]}, &(0x7f00000000c0)=0x40, 0x80000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 18:56:23 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 18:56:23 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) 18:56:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x20040086}, 0x4004000) 18:56:23 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) 18:56:23 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@rose, @null, @remote, @null, @null, @default]}, &(0x7f00000000c0)=0x40, 0x80000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 18:56:24 executing program 4: syz_clone(0x44040000, 0x0, 0x3f000000, 0x0, 0x0, 0x0) 18:56:24 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x4004000) 18:56:24 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) 18:56:24 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@rose, @null, @remote, @null, @null, @default]}, &(0x7f00000000c0)=0x40, 0x80000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 18:56:24 executing program 3: syz_clone(0x44040000, 0x0, 0xd603, 0x0, 0x0, 0x0) 18:56:24 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x0, 0x0) 18:56:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:24 executing program 1: syz_clone(0x44040000, 0x0, 0x3c020000, 0x0, 0x0, 0x0) 18:56:24 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:24 executing program 0: syz_clone(0x44040000, 0x0, 0x35010000, 0x0, 0x0, 0x0) 18:56:24 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:24 executing program 4: syz_clone(0x44040000, 0x0, 0x40000000, 0x0, 0x0, 0x0) 18:56:24 executing program 5: syz_clone(0x44040000, 0x0, 0xc903, 0x0, 0x0, 0x0) 18:56:24 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:24 executing program 3: syz_clone(0x44040000, 0x0, 0xd800, 0x0, 0x0, 0x0) 18:56:24 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:24 executing program 1: syz_clone(0x44040000, 0x0, 0x3f000000, 0x0, 0x0, 0x0) 18:56:24 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:24 executing program 0: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@rose, @null, @remote, @null, @null, @default]}, &(0x7f00000000c0)=0x40, 0x80000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 18:56:24 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:24 executing program 0: syz_clone(0x44040000, 0x0, 0xc603, 0x0, 0x0, 0x0) 18:56:25 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:25 executing program 3: syz_clone(0x44040000, 0x0, 0xda03, 0x0, 0x0, 0x0) 18:56:25 executing program 4: syz_clone(0x44040000, 0x0, 0x41000000, 0x0, 0x0, 0x0) 18:56:25 executing program 5: syz_clone(0x44040000, 0x0, 0xd800, 0x0, 0x0, 0x0) 18:56:25 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 18:56:25 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 18:56:25 executing program 1: syz_clone(0x44040000, 0x0, 0x35000000, 0x0, 0x0, 0x0) 18:56:25 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 18:56:25 executing program 0: syz_clone(0x44040000, 0x0, 0xc603, 0x0, 0x0, 0x0) 18:56:25 executing program 3: syz_clone(0x44040000, 0x0, 0xe000, 0x0, 0x0, 0x0) 18:56:25 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@rose, @null, @remote, @null, @null, @default]}, &(0x7f00000000c0)=0x40, 0x80000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) syz_io_uring_complete(0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 18:56:25 executing program 5: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@rose, @null, @remote, @null, @null, @default]}, &(0x7f00000000c0)=0x40, 0x80000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) syz_io_uring_complete(0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 18:56:25 executing program 4: syz_clone(0x44040000, 0x0, 0x56020000, 0x0, 0x0, 0x0) 18:56:25 executing program 2: syz_clone(0x44040000, 0x0, 0x41000000, 0x0, 0x0, 0x0) 18:56:25 executing program 5: syz_clone(0x44040000, 0x0, 0x34020000, 0x0, 0x0, 0x0) 18:56:26 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) accept4$rose(r0, &(0x7f0000000000)=@full={0xb, @remote, @netrom, 0x0, [@rose, @null, @remote, @null, @null, @default]}, &(0x7f00000000c0)=0x40, 0x80000) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) syz_io_uring_complete(0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, 0x0, 0x25, 0x2}, 0x10) 18:56:26 executing program 0: syz_clone(0x44040000, 0x0, 0x2e030000, 0x0, 0x0, 0x0) 18:56:26 executing program 1: socketpair(0x25, 0x80000, 0x6, &(0x7f0000000180)) socket$inet_sctp(0x2, 0x5, 0x84) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x802, 0x0) 18:56:26 executing program 3: syz_clone(0x44040000, 0x0, 0xe200, 0x0, 0x0, 0x0) 18:56:26 executing program 4: syz_clone(0x44040000, 0x0, 0x58030000, 0x0, 0x0, 0x0) 18:56:26 executing program 1: syz_clone(0x44040000, 0x0, 0xe000, 0x0, 0x0, 0x0) 18:56:26 executing program 2: socketpair(0x26, 0x5, 0x6, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, 0x17, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) 18:56:26 executing program 5: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x800) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) r1 = syz_io_uring_complete(0x0) setsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000080)=0x4, 0x4) socket$kcm(0x29, 0x7, 0x0) 18:56:26 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xf23, @bcast, @bpq0, 0x2, [@default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) syz_io_uring_setup(0xfe8, &(0x7f0000000300)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_complete(r1) syz_io_uring_setup(0x1de6, &(0x7f00000010c0)={0x0, 0x1a93, 0x2, 0x1, 0x1b0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001140), &(0x7f0000001180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000011c0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x5) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) sendto$rose(r3, &(0x7f00000000c0)="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", 0x1000, 0x4000001, 0x0, 0x0) 18:56:26 executing program 5: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x800) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) r1 = syz_io_uring_complete(0x0) setsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000080)=0x4, 0x4) socket$kcm(0x29, 0x7, 0x0) 18:56:26 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000080)=0x48) syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r0, 0x0, &(0x7f0000000040), 0x80000) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) 18:56:26 executing program 0: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @null}, 0x1c) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r6}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000a59c56e9d8c7fe812a85c4a5904a511321033ae34711c1c6ad33ef5c809e80ac155419eb56db3fc709caab1af324a335f56d8c6bdb75f7371bda2cf83e4346d7c3c1af2de2d67795160742f4194f96a0fc577175bf4100a04de341328f92989ee8622388f21210c54fe3c288f70b0807a45c48284a47257a52097b5b25af26723f814ba6317f9dd666908af0ce1f00b020834866c24811a5c90d1a1c62edcc8216831f0fd3e9f51c00dab25478ce2b5043c7fe008b7b7c3ab710e3c775ecc72fc8c4", @ANYRES16=r7, @ANYBLOB="010025bd7000fbdbdf250f000000080004000200000008000600050000000800040008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000014) ioctl$SIOCRSGCAUSE(r0, 0x5411, &(0x7f0000000080)) 18:56:26 executing program 5: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x800) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) r1 = syz_io_uring_complete(0x0) setsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000080)=0x4, 0x4) socket$kcm(0x29, 0x7, 0x0) 18:56:26 executing program 4: syz_clone(0x44040000, 0x0, 0x5c000000, 0x0, 0x0, 0x0) 18:56:26 executing program 3: syz_clone(0x44040000, 0x0, 0xec02, 0x0, 0x0, 0x0) 18:56:26 executing program 5: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x800) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) r1 = syz_io_uring_complete(0x0) setsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000080)=0x4, 0x4) 18:56:26 executing program 2: syz_clone(0x44040000, 0x0, 0xe200, 0x0, 0x0, 0x0) 18:56:26 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0xfffffffffffffdb4) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000040)=0x8) 18:56:26 executing program 0: syz_clone(0x44040000, 0x0, 0x58030000, 0x0, 0x0, 0x0) 18:56:26 executing program 5: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x800) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) syz_io_uring_complete(0x0) 18:56:27 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (fail_nth: 1) 18:56:27 executing program 5: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x800) setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000000), 0x7ffffffff000) [ 1765.292765][T24042] ERROR: Out of memory at tomoyo_realpath_from_path. 18:56:27 executing program 5: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x800) 18:56:27 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (fail_nth: 2) 18:56:27 executing program 3: syz_clone(0x44040000, 0x0, 0xf000, 0x0, 0x0, 0x0) 18:56:27 executing program 4: syz_clone(0x44040000, 0x0, 0x62020000, 0x0, 0x0, 0x0) 18:56:27 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (fail_nth: 3) [ 1765.425833][T24049] ERROR: Out of memory at tomoyo_realpath_from_path. 18:56:27 executing program 5: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x800) 18:56:27 executing program 2: syz_clone(0x44040000, 0x0, 0xec02, 0x0, 0x0, 0x0) 18:56:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) (fail_nth: 1) 18:56:27 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (fail_nth: 4) [ 1765.546753][T24057] binder: 24053:24057 ioctl 40046208 0 returned -12 18:56:27 executing program 5: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x800) 18:56:27 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) (fail_nth: 2) [ 1765.685595][T24066] FAULT_INJECTION: forcing a failure. [ 1765.685595][T24066] name fail_usercopy, interval 1, probability 0, space 0, times 0 18:56:27 executing program 5: openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x800) [ 1765.685629][T24066] CPU: 1 PID: 24066 Comm: syz-executor.0 Not tainted 5.18.0-rc7-next-20220520-syzkaller #0 [ 1765.685656][T24066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 18:56:27 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x2, 0x0) [ 1765.685670][T24066] Call Trace: [ 1765.685676][T24066] [ 1765.685684][T24066] dump_stack_lvl+0xcd/0x134 [ 1765.685720][T24066] should_fail.cold+0x5/0xa [ 1765.685763][T24066] _copy_from_user+0x2a/0x170 [ 1765.685792][T24066] __copy_msghdr_from_user+0x91/0x4b0 [ 1765.685825][T24066] ? __ia32_sys_shutdown+0x70/0x70 [ 1765.685859][T24066] ? __lock_acquire+0xbca/0x5660 18:56:27 executing program 3: syz_clone(0x44040000, 0x0, 0xf203, 0x0, 0x0, 0x0) 18:56:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) (fail_nth: 3) 18:56:27 executing program 4: syz_clone(0x44040000, 0x0, 0x68010000, 0x0, 0x0, 0x0) 18:56:27 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x10, 0x0) [ 1765.685909][T24066] sendmsg_copy_msghdr+0xa1/0x160 [ 1765.685936][T24066] ? do_recvmmsg+0x6d0/0x6d0 [ 1765.685961][T24066] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1765.686003][T24066] ? _parse_integer+0x30/0x30 [ 1765.686038][T24066] ___sys_sendmsg+0xc6/0x170 [ 1765.686066][T24066] ? sendmsg_copy_msghdr+0x160/0x160 [ 1765.686097][T24066] ? __fget_files+0x264/0x470 [ 1765.686137][T24066] ? lock_downgrade+0x6e0/0x6e0 [ 1765.686187][T24066] ? __fget_files+0x286/0x470 18:56:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x800) 18:56:28 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x541b, 0x0) 18:56:28 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x10, 0x0) 18:56:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) (fail_nth: 4) [ 1765.686238][T24066] ? __fget_light+0xea/0x270 18:56:28 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x5421, 0x0) [ 1765.686273][T24066] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1765.686315][T24066] __x64_sys_sendmsg+0x132/0x220 18:56:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) (fail_nth: 5) 18:56:28 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x800) [ 1765.686344][T24066] ? __sys_sendmsg+0x1b0/0x1b0 18:56:28 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x10, 0x0) [ 1765.686386][T24066] ? syscall_enter_from_user_mode+0x21/0x70 [ 1765.686434][T24066] do_syscall_64+0x35/0xb0 [ 1765.686464][T24066] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1765.686491][T24066] RIP: 0033:0x7ff4c80890e9 [ 1765.686510][T24066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 18:56:28 executing program 3: syz_clone(0x44040000, 0x0, 0xf403, 0x0, 0x0, 0x0) 18:56:28 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x5450, 0x0) 18:56:28 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x800) 18:56:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) (fail_nth: 6) 18:56:28 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x10, 0x0) 18:56:28 executing program 4: syz_clone(0x44040000, 0x0, 0x68030000, 0x0, 0x0, 0x0) [ 1765.686535][T24066] RSP: 002b:00007ff4c6ffe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1765.686560][T24066] RAX: ffffffffffffffda RBX: 00007ff4c819bf60 RCX: 00007ff4c80890e9 18:56:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) (fail_nth: 7) 18:56:28 executing program 2: ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x10, 0x0) 18:56:28 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x5451, 0x0) [ 1765.686578][T24066] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1765.686594][T24066] RBP: 00007ff4c6ffe1d0 R08: 0000000000000000 R09: 0000000000000000 18:56:28 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x800) [ 1765.686610][T24066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1765.686626][T24066] R13: 00007ffdf1c8d52f R14: 00007ff4c6ffe300 R15: 0000000000022000 18:56:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) (fail_nth: 8) 18:56:28 executing program 2: ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x10, 0x0) [ 1765.686662][T24066] [ 1765.688381][T24065] FAULT_INJECTION: forcing a failure. [ 1765.688381][T24065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1765.688411][T24065] CPU: 1 PID: 24065 Comm: syz-executor.1 Not tainted 5.18.0-rc7-next-20220520-syzkaller #0 [ 1765.688439][T24065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1765.688454][T24065] Call Trace: [ 1765.688460][T24065] [ 1765.688468][T24065] dump_stack_lvl+0xcd/0x134 [ 1765.688500][T24065] should_fail.cold+0x5/0xa [ 1765.688546][T24065] _copy_to_user+0x2a/0x140 [ 1765.688574][T24065] simple_read_from_buffer+0xcc/0x160 [ 1765.688616][T24065] proc_fail_nth_read+0x187/0x220 [ 1765.688657][T24065] ? proc_exe_link+0x1d0/0x1d0 18:56:28 executing program 3: syz_clone(0x44040000, 0x0, 0xf603, 0x0, 0x0, 0x0) 18:56:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, 0x0, 0x800) 18:56:28 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x5452, 0x0) 18:56:28 executing program 2: ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x10, 0x0) 18:56:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) (fail_nth: 9) 18:56:28 executing program 4: syz_clone(0x44040000, 0x0, 0x6d000000, 0x0, 0x0, 0x0) 18:56:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, 0x0, 0x800) [ 1765.688694][T24065] ? security_file_permission+0xab/0xd0 [ 1765.688740][T24065] ? proc_exe_link+0x1d0/0x1d0 18:56:28 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x5460, 0x0) 18:56:28 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x10, 0x0) 18:56:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) (fail_nth: 10) [ 1765.688777][T24065] vfs_read+0x1ef/0x5d0 [ 1765.688818][T24065] ksys_read+0x127/0x250 [ 1765.688853][T24065] ? vfs_write+0xac0/0xac0 [ 1765.688891][T24065] ? syscall_enter_from_user_mode+0x21/0x70 [ 1765.688936][T24065] do_syscall_64+0x35/0xb0 [ 1765.688968][T24065] entry_SYSCALL_64_after_hwframe+0x46/0xb0 18:56:29 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x8933, 0x0) 18:56:29 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x10, 0x0) [ 1765.688995][T24065] RIP: 0033:0x7fa35d63bc9c [ 1765.689015][T24065] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1765.689038][T24065] RSP: 002b:00007fa35e757160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1765.689062][T24065] RAX: ffffffffffffffda RBX: 00007fa35d79bf60 RCX: 00007fa35d63bc9c [ 1765.689080][T24065] RDX: 000000000000000f RSI: 00007fa35e7571e0 RDI: 0000000000000004 18:56:29 executing program 3: syz_clone(0x44040000, 0x0, 0xfa03, 0x0, 0x0, 0x0) 18:56:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, 0x0, 0x800) 18:56:29 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x400448c9, 0x0) 18:56:29 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x10, 0x0) 18:56:29 executing program 4: syz_clone(0x44040000, 0x0, 0x76020000, 0x0, 0x0, 0x0) [ 1765.689097][T24065] RBP: 00007fa35e7571d0 R08: 0000000000000000 R09: 0000000000000000 [ 1765.689113][T24065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 18:56:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x800) 18:56:29 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x400448dd, 0x0) 18:56:29 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x10, 0x0) [ 1765.689129][T24065] R13: 00007ffed910053f R14: 00007fa35e757300 R15: 0000000000022000 [ 1765.689167][T24065] [ 1765.828431][T24072] FAULT_INJECTION: forcing a failure. [ 1765.828431][T24072] name fail_usercopy, interval 1, probability 0, space 0, times 0 18:56:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:29 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x400454ca, 0x0) [ 1765.828466][T24072] CPU: 1 PID: 24072 Comm: syz-executor.0 Not tainted 5.18.0-rc7-next-20220520-syzkaller #0 [ 1765.828494][T24072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1765.828509][T24072] Call Trace: [ 1765.828515][T24072] [ 1765.828523][T24072] dump_stack_lvl+0xcd/0x134 [ 1765.828560][T24072] should_fail.cold+0x5/0xa [ 1765.828602][T24072] _copy_from_user+0x2a/0x170 [ 1765.828632][T24072] iovec_from_user+0x149/0x3a0 [ 1765.828665][T24072] ? _copy_from_user+0xf9/0x170 [ 1765.828691][T24072] __import_iovec+0x65/0x5d0 [ 1765.828733][T24072] import_iovec+0x10c/0x150 [ 1765.828771][T24072] sendmsg_copy_msghdr+0x12d/0x160 [ 1765.828803][T24072] ? do_recvmmsg+0x6d0/0x6d0 [ 1765.828830][T24072] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1765.828873][T24072] ? _parse_integer+0x30/0x30 [ 1765.828908][T24072] ___sys_sendmsg+0xc6/0x170 18:56:29 executing program 3: syz_clone(0x44040000, 0x0, 0xfc03, 0x0, 0x0, 0x0) 18:56:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x800) 18:56:29 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x10, 0x0) 18:56:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:29 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046205, 0x0) 18:56:29 executing program 4: syz_clone(0x44040000, 0x0, 0x80030000, 0x0, 0x0, 0x0) [ 1765.828935][T24072] ? sendmsg_copy_msghdr+0x160/0x160 [ 1765.828964][T24072] ? __fget_files+0x264/0x470 [ 1765.828997][T24072] ? lock_downgrade+0x6e0/0x6e0 [ 1765.829048][T24072] ? __fget_files+0x286/0x470 18:56:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x800) [ 1765.829091][T24072] ? __fget_light+0xea/0x270 [ 1765.829126][T24072] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 18:56:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:29 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x10, 0x0) 18:56:29 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046207, 0x0) [ 1765.829165][T24072] __x64_sys_sendmsg+0x132/0x220 [ 1765.829199][T24072] ? __sys_sendmsg+0x1b0/0x1b0 18:56:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x800) [ 1765.829242][T24072] ? syscall_enter_from_user_mode+0x21/0x70 [ 1765.829289][T24072] do_syscall_64+0x35/0xb0 [ 1765.829315][T24072] entry_SYSCALL_64_after_hwframe+0x46/0xb0 18:56:30 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046205, 0x0) [ 1765.829341][T24072] RIP: 0033:0x7ff4c80890e9 [ 1765.829363][T24072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1765.829387][T24072] RSP: 002b:00007ff4c6ffe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1765.829413][T24072] RAX: ffffffffffffffda RBX: 00007ff4c819bf60 RCX: 00007ff4c80890e9 [ 1765.829431][T24072] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1765.829447][T24072] RBP: 00007ff4c6ffe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1765.829463][T24072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1765.829478][T24072] R13: 00007ffdf1c8d52f R14: 00007ff4c6ffe300 R15: 0000000000022000 [ 1765.829513][T24072] [ 1766.087035][T24085] binder: 24080:24085 ioctl 10 0 returned -22 [ 1766.246734][T24092] binder: 24089:24092 ioctl 541b 0 returned -22 [ 1766.321435][T24096] binder: 24095:24096 ioctl 10 0 returned -22 [ 1766.417129][T24102] FAULT_INJECTION: forcing a failure. [ 1766.417129][T24102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1766.417161][T24102] CPU: 1 PID: 24102 Comm: syz-executor.0 Not tainted 5.18.0-rc7-next-20220520-syzkaller #0 [ 1766.417195][T24102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1766.417209][T24102] Call Trace: [ 1766.417215][T24102] [ 1766.417222][T24102] dump_stack_lvl+0xcd/0x134 [ 1766.417256][T24102] should_fail.cold+0x5/0xa [ 1766.417299][T24102] _copy_from_iter+0x389/0x15a0 [ 1766.417343][T24102] ? _copy_from_iter_nocache+0x1510/0x1510 [ 1766.417375][T24102] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1766.417413][T24102] ? memset+0x20/0x40 [ 1766.417437][T24102] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1766.417468][T24102] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 18:56:30 executing program 3: syz_clone(0x44040000, 0x0, 0xfd01, 0x0, 0x0, 0x0) 18:56:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:30 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046210, 0x0) 18:56:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x800) 18:56:30 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046205, 0x0) 18:56:30 executing program 4: syz_clone(0x44040000, 0x0, 0x84000000, 0x0, 0x0, 0x0) [ 1766.417498][T24102] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1766.417529][T24102] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 18:56:30 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046215, 0x0) 18:56:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x800) 18:56:30 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046205, 0x0) 18:56:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:30 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40049409, 0x0) [ 1766.417560][T24102] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1766.417591][T24102] ? __phys_addr_symbol+0x2c/0x70 [ 1766.417628][T24102] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 18:56:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x800) [ 1766.417657][T24102] ? __check_object_size+0x353/0x7a0 [ 1766.417686][T24102] netlink_sendmsg+0x875/0xe10 [ 1766.417716][T24102] ? netlink_unicast+0x7f0/0x7f0 [ 1766.417745][T24102] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1766.417778][T24102] ? netlink_unicast+0x7f0/0x7f0 [ 1766.417801][T24102] sock_sendmsg+0xcf/0x120 [ 1766.417838][T24102] ____sys_sendmsg+0x6eb/0x810 [ 1766.417879][T24102] ? kernel_sendmsg+0x50/0x50 18:56:31 executing program 3: syz_clone(0x44040000, 0x0, 0x20010, 0x0, 0x0, 0x0) [ 1766.417912][T24102] ? do_recvmmsg+0x6d0/0x6d0 18:56:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:31 executing program 2: ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046205, 0x0) 18:56:31 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40086602, 0x0) 18:56:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x0) 18:56:31 executing program 4: syz_clone(0x44040000, 0x0, 0x86010000, 0x0, 0x0, 0x0) 18:56:31 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x400c620e, 0x0) 18:56:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) [ 1766.417936][T24102] ? lockdep_hardirqs_on_prepare+0x400/0x400 18:56:31 executing program 5: syz_clone(0x44040000, 0x0, 0xfd01, 0x0, 0x0, 0x0) [ 1766.417977][T24102] ? _parse_integer+0x30/0x30 18:56:31 executing program 2: ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046205, 0x0) [ 1766.418010][T24102] ___sys_sendmsg+0xf3/0x170 [ 1766.418036][T24102] ? sendmsg_copy_msghdr+0x160/0x160 18:56:31 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x4018620d, 0x0) [ 1766.418065][T24102] ? lock_downgrade+0x6e0/0x6e0 [ 1766.418114][T24102] ? __fget_files+0x286/0x470 [ 1766.418154][T24102] ? __fget_light+0xea/0x270 18:56:31 executing program 2: ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046205, 0x0) [ 1766.418190][T24102] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1766.418226][T24102] __x64_sys_sendmsg+0x132/0x220 [ 1766.418251][T24102] ? __sys_sendmsg+0x1b0/0x1b0 [ 1766.418289][T24102] ? syscall_enter_from_user_mode+0x21/0x70 [ 1766.418331][T24102] do_syscall_64+0x35/0xb0 [ 1766.418359][T24102] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1766.418385][T24102] RIP: 0033:0x7ff4c80890e9 [ 1766.418403][T24102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 18:56:31 executing program 3: syz_clone(0x44040000, 0x0, 0x20200, 0x0, 0x0, 0x0) 18:56:31 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40186366, 0x0) 18:56:31 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046205, 0x0) 18:56:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:31 executing program 4: syz_clone(0x44040000, 0x0, 0x8b020000, 0x0, 0x0, 0x0) 18:56:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:32 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046205, 0x0) 18:56:32 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x401c5820, 0x0) [ 1766.418426][T24102] RSP: 002b:00007ff4c6ffe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1766.418449][T24102] RAX: ffffffffffffffda RBX: 00007ff4c819bf60 RCX: 00007ff4c80890e9 18:56:32 executing program 5: syz_clone(0x44040000, 0x0, 0x20010, 0x0, 0x0, 0x0) 18:56:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:32 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046205, 0x0) [ 1766.418465][T24102] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1766.418480][T24102] RBP: 00007ff4c6ffe1d0 R08: 0000000000000000 R09: 0000000000000000 18:56:32 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x4020940d, 0x0) [ 1766.418496][T24102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1766.418511][T24102] R13: 00007ffdf1c8d52f R14: 00007ff4c6ffe300 R15: 0000000000022000 [ 1766.418544][T24102] [ 1766.465856][T24105] binder: 24104:24105 ioctl 10 0 returned -22 [ 1766.610859][T24112] binder: 24110:24112 ioctl 10 0 returned -22 [ 1767.247191][T24150] FAULT_INJECTION: forcing a failure. [ 1767.247191][T24150] name fail_usercopy, interval 1, probability 0, space 0, times 0 18:56:32 executing program 3: syz_clone(0x44040000, 0x0, 0x3ffff, 0x0, 0x0, 0x0) 18:56:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x900, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:32 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046205, 0x0) 18:56:32 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x80086301, 0x0) 18:56:32 executing program 4: syz_clone(0x44040000, 0x0, 0x8ba00000, 0x0, 0x0, 0x0) 18:56:32 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046205, 0x0) 18:56:32 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x80086601, 0x0) 18:56:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0xe00, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) [ 1767.247224][T24150] CPU: 0 PID: 24150 Comm: syz-executor.0 Not tainted 5.18.0-rc7-next-20220520-syzkaller #0 [ 1767.247253][T24150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1767.247267][T24150] Call Trace: [ 1767.247274][T24150] [ 1767.247282][T24150] dump_stack_lvl+0xcd/0x134 [ 1767.247317][T24150] should_fail.cold+0x5/0xa [ 1767.247365][T24150] _copy_to_user+0x2a/0x140 [ 1767.247392][T24150] simple_read_from_buffer+0xcc/0x160 18:56:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x900, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:32 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x801c581f, 0x0) 18:56:32 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046205, 0x0) 18:56:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) [ 1767.247437][T24150] proc_fail_nth_read+0x187/0x220 [ 1767.247478][T24150] ? proc_exe_link+0x1d0/0x1d0 [ 1767.247513][T24150] ? security_file_permission+0xab/0xd0 [ 1767.247556][T24150] ? proc_exe_link+0x1d0/0x1d0 [ 1767.247602][T24150] vfs_read+0x1ef/0x5d0 [ 1767.247643][T24150] ksys_read+0x127/0x250 [ 1767.247678][T24150] ? vfs_write+0xac0/0xac0 [ 1767.247715][T24150] ? syscall_enter_from_user_mode+0x21/0x70 [ 1767.247759][T24150] do_syscall_64+0x35/0xb0 [ 1767.247788][T24150] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1767.247814][T24150] RIP: 0033:0x7ff4c803bc9c [ 1767.247834][T24150] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1767.247857][T24150] RSP: 002b:00007ff4c6ffe160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1767.247881][T24150] RAX: ffffffffffffffda RBX: 00007ff4c819bf60 RCX: 00007ff4c803bc9c [ 1767.247899][T24150] RDX: 000000000000000f RSI: 00007ff4c6ffe1e0 RDI: 0000000000000004 [ 1767.247913][T24150] RBP: 00007ff4c6ffe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1767.247927][T24150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 18:56:32 executing program 3: syz_clone(0x44040000, 0x0, 0x40000, 0x0, 0x0, 0x0) 18:56:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x2000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:32 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc0045878, 0x0) 18:56:32 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x4020940d, 0x0) 18:56:32 executing program 4: syz_clone(0x44040000, 0x0, 0x8f278000, 0x0, 0x0, 0x0) 18:56:32 executing program 5: syz_clone(0x44040000, 0x0, 0x86010000, 0x0, 0x0, 0x0) [ 1767.247940][T24150] R13: 00007ffdf1c8d52f R14: 00007ff4c6ffe300 R15: 0000000000022000 18:56:32 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc0045878, 0x0) 18:56:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x4a6d, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:33 executing program 2: syz_clone(0x44040000, 0x0, 0x3ffff, 0x0, 0x0, 0x0) [ 1767.247971][T24150] [ 1767.333499][T24154] binder: 24153:24154 ioctl 8933 0 returned -22 [ 1767.565887][T24166] binder: 24159:24166 ioctl 400448c9 0 returned -22 18:56:33 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc0046209, 0x0) 18:56:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x6000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) [ 1767.720181][T24178] binder: 24174:24178 ioctl 400448dd 0 returned -22 [ 1767.823085][T24181] binder: 24180:24181 ioctl 400454ca 0 returned -22 [ 1768.096511][T24190] binder: 24188:24190 ioctl 40046205 0 returned -22 18:56:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x6d4a, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) [ 1768.462013][T24208] binder: 24207:24208 ioctl 40046205 0 returned -22 [ 1768.915844][T24214] binder: 24212:24214 ioctl 40046210 0 returned -14 [ 1768.942518][T24216] binder: 24215:24216 ioctl 40046205 0 returned -22 [ 1768.982008][T24222] binder: 24221:24222 ioctl 40046215 0 returned -22 [ 1769.090335][T24227] binder: 24226:24227 ioctl 40046205 0 returned -22 [ 1769.701494][T24251] binder: 24250:24251 ioctl 400c620e 0 returned -14 [ 1769.888027][T24260] binder: 24258:24260 ioctl 4018620d 0 returned -22 [ 1770.144716][T24273] binder: 24267:24273 ioctl 40186366 0 returned -22 [ 1770.587913][T24297] binder: 24292:24297 ioctl 80086301 0 returned -22 18:56:33 executing program 3: syz_clone(0x44040000, 0x0, 0x80000, 0x0, 0x0, 0x0) 18:56:33 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc00c620f, 0x0) 18:56:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0xf000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) [ 1770.710208][T24309] binder: 24303:24309 ioctl 80086601 0 returned -22 [ 1770.845706][T24312] binder: 24310:24312 ioctl 801c581f 0 returned -22 18:56:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc0046209, 0x0) 18:56:33 executing program 4: syz_clone(0x44040000, 0x0, 0x9a010000, 0x0, 0x0, 0x0) 18:56:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x34000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:33 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc00c6211, 0x0) [ 1771.343701][T24340] binder: 24338:24340 ioctl c0046209 0 returned -22 [ 1771.684642][T24351] binder: 24348:24351 ioctl c00c620f 0 returned -14 18:56:33 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x4018620d, 0x0) [ 1771.761713][T24355] binder: 24353:24355 ioctl c0046209 0 returned -22 18:56:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc0046209, 0x0) 18:56:33 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc018620b, 0x0) 18:56:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x400300, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:33 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x4018620d, 0x0) [ 1771.808654][T24357] BUG: sleeping function called from invalid context at lib/usercopy.c:28 [ 1771.808673][T24357] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 24357, name: syz-executor.1 [ 1771.808694][T24357] preempt_count: 1, expected: 0 [ 1771.808705][T24357] RCU nest depth: 0, expected: 0 [ 1771.808716][T24357] 1 lock held by syz-executor.1/24357: [ 1771.808731][T24357] #0: ffff888055678af8 (&proc->inner_lock){+.+.}-{2:2}, at: binder_ioctl+0x798/0x6d80 [ 1771.808910][T24357] Preemption disabled at: [ 1771.808916][T24357] [<0000000000000000>] 0x0 [ 1771.808937][T24357] CPU: 0 PID: 24357 Comm: syz-executor.1 Not tainted 5.18.0-rc7-next-20220520-syzkaller #0 18:56:33 executing program 3: syz_clone(0x44040000, 0x0, 0xf2000, 0x0, 0x0, 0x0) 18:56:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc0046209, 0x0) 18:56:33 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc018620c, 0x0) 18:56:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0xf0ffff, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:33 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x4018620d, 0x0) 18:56:33 executing program 4: syz_clone(0x44040000, 0x0, 0x9a030000, 0x0, 0x0, 0x0) 18:56:33 executing program 5: ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0xc0046209, 0x0) 18:56:33 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc0189436, 0x0) 18:56:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x1000000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:33 executing program 2: ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x4018620d, 0x0) [ 1771.808964][T24357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 18:56:33 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc020660b, 0x0) 18:56:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x2000000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) [ 1771.808978][T24357] Call Trace: [ 1771.808984][T24357] [ 1771.808993][T24357] dump_stack_lvl+0xcd/0x134 [ 1771.809024][T24357] __might_resched.cold+0x222/0x26b [ 1771.809083][T24357] __might_fault+0x6c/0x170 [ 1771.809144][T24357] _copy_to_user+0x25/0x140 [ 1771.809172][T24357] binder_ioctl+0x7aa/0x6d80 18:56:34 executing program 3: syz_clone(0x44040000, 0x0, 0x100000, 0x0, 0x0, 0x0) 18:56:34 executing program 5: ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0xc0046209, 0x0) 18:56:34 executing program 2: ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x4018620d, 0x0) 18:56:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x3000000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc0306201, 0x0) 18:56:34 executing program 4: syz_clone(0x44040000, 0x0, 0xa0030000, 0x0, 0x0, 0x0) [ 1771.809213][T24357] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1771.809248][T24357] ? tomoyo_path_number_perm+0x24e/0x590 [ 1771.809323][T24357] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1771.809364][T24357] ? lockdep_hardirqs_on_prepare+0x400/0x400 18:56:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x4000000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:34 executing program 2: ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x4018620d, 0x0) 18:56:34 executing program 5: ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0xc0046209, 0x0) 18:56:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x2) [ 1771.809413][T24357] ? binder_thread_write+0x3220/0x3220 [ 1771.809452][T24357] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 18:56:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x8000000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:34 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc0046209, 0x0) [ 1771.809487][T24357] ? do_vfs_ioctl+0x132/0x15c0 [ 1771.809522][T24357] ? vfs_fileattr_set+0xbe0/0xbe0 [ 1771.809575][T24357] ? __context_tracking_exit+0xb8/0xe0 [ 1771.809622][T24357] ? __fget_files+0x286/0x470 [ 1771.809664][T24357] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1771.809697][T24357] ? binder_thread_write+0x3220/0x3220 [ 1771.809735][T24357] __x64_sys_ioctl+0x193/0x200 [ 1771.809772][T24357] do_syscall_64+0x35/0xb0 [ 1771.809801][T24357] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1771.809827][T24357] RIP: 0033:0x7fa35d6890e9 [ 1771.809847][T24357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1771.809871][T24357] RSP: 002b:00007fa35e757168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1771.809894][T24357] RAX: ffffffffffffffda RBX: 00007fa35d79bf60 RCX: 00007fa35d6890e9 [ 1771.809912][T24357] RDX: 0000000000000000 RSI: 00000000c00c6211 RDI: 0000000000000003 18:56:34 executing program 3: syz_clone(0x44040000, 0x0, 0x101000, 0x0, 0x0, 0x0) 18:56:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x3) 18:56:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x4018620d, 0x0) 18:56:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x9000000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:34 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc0046209, 0x0) 18:56:34 executing program 4: syz_clone(0x44040000, 0x0, 0xb6020000, 0x0, 0x0, 0x0) 18:56:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x4018620d, 0x0) 18:56:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x4) 18:56:34 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0xc0046209, 0x0) 18:56:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0xe000000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) [ 1771.809927][T24357] RBP: 00007fa35d6e308d R08: 0000000000000000 R09: 0000000000000000 [ 1771.809943][T24357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1771.809958][T24357] R13: 00007ffed910053f R14: 00007fa35e757300 R15: 0000000000022000 18:56:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x4018620d, 0x0) 18:56:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5) [ 1771.809996][T24357] [ 1771.810039][T24357] [ 1771.810043][T24357] ============================= [ 1771.810049][T24357] [ BUG: Invalid wait context ] [ 1771.810057][T24357] 5.18.0-rc7-next-20220520-syzkaller #0 Tainted: G W [ 1771.810072][T24357] ----------------------------- [ 1771.810077][T24357] syz-executor.1/24357 is trying to lock: [ 1771.810089][T24357] ffff88807dfb9d28 (&mm->mmap_lock#2){++++}-{3:3}, at: __might_fault+0xa1/0x170 [ 1771.810152][T24357] other info that might help us debug this: [ 1771.810159][T24357] context-{4:4} 18:56:34 executing program 3: syz_clone(0x44040000, 0x0, 0x12b000, 0x0, 0x0, 0x0) 18:56:34 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0xc0046209, 0x0) 18:56:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0xf000000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:34 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x4018620d, 0x0) 18:56:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x6) [ 1771.810166][T24357] 1 lock held by syz-executor.1/24357: [ 1771.810178][T24357] #0: ffff888055678af8 (&proc->inner_lock){+.+.}-{2:2}, at: binder_ioctl+0x798/0x6d80 18:56:34 executing program 4: syz_clone(0x44040000, 0x0, 0xbc030000, 0x0, 0x0, 0x0) 18:56:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x20000000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:34 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x4018620d, 0x0) 18:56:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x7) 18:56:34 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0xc0046209, 0x0) [ 1771.810231][T24357] stack backtrace: [ 1771.810237][T24357] CPU: 0 PID: 24357 Comm: syz-executor.1 Tainted: G W 5.18.0-rc7-next-20220520-syzkaller #0 [ 1771.810260][T24357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1771.810271][T24357] Call Trace: 18:56:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x60000000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:34 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0xc0046209, 0x0) [ 1771.810275][T24357] [ 1771.810281][T24357] dump_stack_lvl+0xcd/0x134 [ 1771.810320][T24357] __lock_acquire.cold+0xdb/0x3b4 [ 1771.810361][T24357] ? lock_chain_count+0x20/0x20 [ 1771.810399][T24357] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1771.810445][T24357] lock_acquire+0x1ab/0x570 [ 1771.810481][T24357] ? __might_fault+0xa1/0x170 [ 1771.810509][T24357] ? lock_release+0x780/0x780 [ 1771.810545][T24357] ? dump_stack_lvl+0x120/0x134 [ 1771.810570][T24357] ? dump_stack_lvl+0x12a/0x134 [ 1771.810594][T24357] ? dump_stack_lvl+0x12c/0x134 [ 1771.810618][T24357] __might_fault+0x104/0x170 [ 1771.810640][T24357] ? __might_fault+0xa1/0x170 [ 1771.810662][T24357] _copy_to_user+0x25/0x140 [ 1771.810682][T24357] binder_ioctl+0x7aa/0x6d80 [ 1771.810714][T24357] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1771.810746][T24357] ? tomoyo_path_number_perm+0x24e/0x590 [ 1771.810781][T24357] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1771.810812][T24357] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1771.810849][T24357] ? binder_thread_write+0x3220/0x3220 18:56:34 executing program 3: syz_clone(0x44040000, 0x0, 0x200f00, 0x0, 0x0, 0x0) 18:56:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x300) 18:56:34 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x4018620d, 0x0) 18:56:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x6d4a0000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x20000000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:34 executing program 4: syz_clone(0x44040000, 0x0, 0xc2020000, 0x0, 0x0, 0x0) 18:56:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x500) 18:56:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x9effffff, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x20000000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) [ 1771.810880][T24357] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1771.810911][T24357] ? do_vfs_ioctl+0x132/0x15c0 [ 1771.810941][T24357] ? vfs_fileattr_set+0xbe0/0xbe0 [ 1771.810985][T24357] ? __context_tracking_exit+0xb8/0xe0 18:56:34 executing program 2: syz_clone(0x44040000, 0x0, 0xbc030000, 0x0, 0x0, 0x0) 18:56:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x600) 18:56:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x20000000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) [ 1771.811031][T24357] ? __fget_files+0x286/0x470 [ 1771.811068][T24357] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1771.811095][T24357] ? binder_thread_write+0x3220/0x3220 [ 1771.811122][T24357] __x64_sys_ioctl+0x193/0x200 [ 1771.811147][T24357] do_syscall_64+0x35/0xb0 [ 1771.811174][T24357] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 1771.811202][T24357] RIP: 0033:0x7fa35d6890e9 [ 1771.811222][T24357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 18:56:34 executing program 3: syz_clone(0x44040000, 0x0, 0x400000, 0x0, 0x0, 0x0) 18:56:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0xf0ffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x700) 18:56:34 executing program 5: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x20000000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:34 executing program 4: syz_clone(0x44040000, 0x0, 0xc4030000, 0x0, 0x0, 0x0) 18:56:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0xff00) [ 1771.811244][T24357] RSP: 002b:00007fa35e757168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:56:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0xf5ffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:35 executing program 2: syz_clone(0x44040000, 0x0, 0xbc030000, 0x0, 0x0, 0x0) 18:56:35 executing program 5: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x20000000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:35 executing program 5: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x20000000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) [ 1771.811268][T24357] RAX: ffffffffffffffda RBX: 00007fa35d79bf60 RCX: 00007fa35d6890e9 [ 1771.811286][T24357] RDX: 0000000000000000 RSI: 00000000c00c6211 RDI: 0000000000000003 18:56:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0xfcffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x1000000) [ 1771.811309][T24357] RBP: 00007fa35d6e308d R08: 0000000000000000 R09: 0000000000000000 [ 1771.811325][T24357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1771.811340][T24357] R13: 00007ffed910053f R14: 00007fa35e757300 R15: 0000000000022000 [ 1771.811365][T24357] [ 1771.830392][T24357] binder: 24356:24357 ioctl c00c6211 0 returned -14 [ 1771.861745][T24364] binder: 24363:24364 ioctl 4018620d 0 returned -22 [ 1771.898702][T24368] binder: 24367:24368 ioctl c018620b 0 returned -14 [ 1771.903588][T24365] binder: 24362:24365 ioctl c0046209 0 returned -22 [ 1771.953853][T24371] binder: 24370:24371 ioctl 4018620d 0 returned -22 [ 1772.032903][T24376] binder: 24374:24376 ioctl c0046209 0 returned -22 18:56:35 executing program 3: syz_clone(0x44040000, 0x0, 0x80278f, 0x0, 0x0, 0x0) 18:56:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0xfffff000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:35 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x20000000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x2000000) [ 1772.049574][T24382] binder: 24377:24382 ioctl c018620c 0 returned -14 [ 1772.049581][T24380] binder: 24375:24380 ioctl 4018620d 0 returned -22 [ 1772.238719][T24406] binder: 24404:24406 ioctl c0306201 0 returned -14 18:56:35 executing program 4: syz_clone(0x44040000, 0x0, 0xc6030000, 0x0, 0x0, 0x0) 18:56:35 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x20000000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x3000000) 18:56:35 executing program 2: syz_clone(0x44040000, 0x0, 0xbc030000, 0x0, 0x0, 0x0) 18:56:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0xffffff7f, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:35 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x20000000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x4000000) 18:56:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:35 executing program 3: syz_clone(0x44040000, 0x0, 0xb01200, 0x0, 0x0, 0x0) 18:56:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, 0x0, 0x0) 18:56:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x5000000) 18:56:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0xfffffff0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:35 executing program 4: syz_clone(0x44040000, 0x0, 0xc9030000, 0x0, 0x0, 0x0) 18:56:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, 0x0, 0x0) 18:56:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0xfffffff5, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:35 executing program 2: syz_clone(0x0, 0x0, 0xbc030000, 0x0, 0x0, 0x0) 18:56:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x6000000) 18:56:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0xfffffffc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, 0x0, 0x0) 18:56:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x7000000) 18:56:35 executing program 3: syz_clone(0x44040000, 0x0, 0xe00000, 0x0, 0x0, 0x0) 18:56:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 18:56:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0xffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0xfdfdffff) 18:56:35 executing program 4: syz_clone(0x44040000, 0x0, 0xd0030000, 0x0, 0x0, 0x0) 18:56:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 18:56:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xf, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:35 executing program 2: syz_clone(0x0, 0x0, 0xbc030000, 0x0, 0x0, 0x0) 18:56:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0xff000000) 18:56:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 18:56:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xc0, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:35 executing program 2: syz_clone(0x0, 0x0, 0xbc030000, 0x0, 0x0, 0x0) 18:56:35 executing program 3: syz_clone(0x44040000, 0x0, 0xf0ff1f, 0x0, 0x0, 0x0) 18:56:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0xfffffdfd) 18:56:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xec0, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18:56:35 executing program 4: syz_clone(0x44040000, 0x0, 0xd6020000, 0x0, 0x0, 0x0) 18:56:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18:56:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x33fe0, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x100000000000000) 18:56:35 executing program 2: syz_clone(0x44040000, 0x0, 0xe00000, 0x0, 0x0, 0x0) 18:56:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x7ffff000, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18:56:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x200000000000000) 18:56:36 executing program 3: syz_clone(0x44040000, 0x0, 0xf0ffff, 0x0, 0x0, 0x0) 18:56:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xfffffdef, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:36 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x300000000000000) 18:56:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x20000000, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 18:56:36 executing program 4: syz_clone(0x44040000, 0x0, 0xd8000000, 0x0, 0x0, 0x0) 18:56:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x2, 0x5}, 0x14}}, 0x0) 18:56:36 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x400000000000000) 18:56:36 executing program 5: syz_clone(0x44040000, 0x0, 0xf0ff1f, 0x0, 0x0, 0x0) 18:56:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xc0, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x2, 0x5}, 0x14}}, 0x0) 18:56:36 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x500000000000000) 18:56:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x0, 0x5}, 0x14}}, 0x0) 18:56:36 executing program 3: syz_clone(0x44040000, 0x0, 0x1000000, 0x0, 0x0, 0x0) 18:56:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xc0, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:36 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x600000000000000) 18:56:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0xc, 0x5}, 0x14}}, 0x0) 18:56:36 executing program 4: syz_clone(0x44040000, 0x0, 0xe0000000, 0x0, 0x0, 0x0) 18:56:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xc0, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:36 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x700000000000000) 18:56:36 executing program 5: syz_clone(0x44040000, 0x0, 0xd8000000, 0x0, 0x0, 0x0) 18:56:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:36 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0xfdfdffff00000000) 18:56:36 executing program 2: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xc0, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:36 executing program 2: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xc0, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:36 executing program 3: syz_clone(0x44040000, 0x0, 0x1010000, 0x0, 0x0, 0x0) 18:56:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x2}, 0x14}}, 0x0) 18:56:36 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0xff00000000000000) 18:56:36 executing program 2: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xc0, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:36 executing program 4: syz_clone(0x44040000, 0x0, 0xe2000000, 0x0, 0x0, 0x0) 18:56:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x3}, 0x14}}, 0x0) 18:56:36 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12a00040}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x380, r0, 0x10, 0x70bd29, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe9, 0x2d}}}}, [@NL80211_ATTR_IE={0x308, 0x2a, [@tim={0x5, 0xd8, {0x8, 0xbf, 0x1, "8f281b8e433170908a222268f6b0fe49ddb9e43c5407031f9d4a78541717d87ec01b8d97e3e31ead8b2ea78ff3e8610811e9c69a71cf319a6331d04a452ddc12026273bde3bb2e28dc7f28b8440b6e86262270480e2aba7ca3168de5d133e0d5325d4dddb8ffd39c5b5a2e8dbe2e31f370ed845e929cfddf5c2189302796ab8bd3690aa597b864ecfdc25c13c1f208b04817fd129bed2085f18b0a7031f0b18c812849cf998dd2668984b51066e6a899034076d886219b17c6cfd0f356efe625e2aebfad65fc1a264ecefac1c38458477292b39713"}}, @ht={0x2d, 0x1a, {0x2000, 0x3, 0x6, 0x0, {0x65, 0x5, 0x0, 0x5}, 0x8, 0xf2, 0x1}}, @random_vendor={0xdd, 0xaa, "8d566b76f1618e0a60950994f25ab5bcd39ef45091ff06be3322768931a1d7722c95aca73abfdcc0f13efee020dfb67925453ecafa423a311bafb85fafc269e5c93e18d34337bfd787334629882e3414e03a1b083255976851729afbd133a9bd16ec8c4a43d0f9e09c8bd853aea1ef76c8df05b29eee18818ab95a86cc35203ffefcfe35d7763068e1c451f25ee17048aa5b3adfafef62817242c333316c7626e1bf490a9706ad83ded3"}, @random={0x7f, 0x90, "416bd0ae20d093d7f62b06ba62d43895002763343f25b0efa06326bacef40747fdaf84af36fd0802eac071d0492c3cf7601cbc6c861c1b2139f81625218d6acf2cb21295bac795a9fcaec9ffdc9dc1684c25f11f229dfbfe6512af5637f36bd9ede59c549148abc01d0e9db6f4c14cad92f120896a9ed457e9212f7ba81c55676aa2157051e1c6a809dd594756d5be5e"}, @challenge={0x10, 0x1, 0x9b}, @fast_bss_trans={0x37, 0xa8, {0x93, 0x5, "42819c906b6f9b308b4ed25f598e331f", "83df097edef0e035ecbd7c7f32a5d80ac962254a22df3c52a798294adf7a001a", "3e42fa5dfcbe27b4424045fc568a520c5f1d195d135f37400b128fc594dec01f", [{0x1, 0x3, "c9f91e"}, {0x2, 0x5, "926dbdf8ed"}, {0x1, 0x16, "047dbfe8fa8809d7ac4c3c374bddc0e81845d9653937"}, {0x2, 0x7, "27fb54fe3ca3dd"}, {0x2, 0x27, "0fdcf5f280c1be12d8f5437974faa616d517cdd75e84eca56c63b2d6340e63bf7df6f42cdc60fa"}]}}, @rann={0x7e, 0x15, {{0x0, 0x9}, 0x8, 0x8, @device_b, 0xffff8001, 0x3, 0x10001}}, @ibss={0x6, 0x2, 0xff}, @mesh_chsw={0x76, 0x6, {0x99, 0x90, 0x16, 0x3f}}]}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="3326c90779fa"}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x80, 0x1, 0x1, 0x0, {0xa9f2, 0x8, 0x0, 0x1f, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x1637, 0x3f}}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a94ab7e0d200"}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xe000, {0xb02d, 0x1, 0xa9c, 0x8}}}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, 0x380}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 18:56:36 executing program 5: syz_clone(0x44040000, 0x0, 0xd8000000, 0x0, 0x0, 0x0) 18:56:36 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xc0, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x4}, 0x14}}, 0x0) 18:56:36 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12a00040}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x380, r0, 0x10, 0x70bd29, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe9, 0x2d}}}}, [@NL80211_ATTR_IE={0x308, 0x2a, [@tim={0x5, 0xd8, {0x8, 0xbf, 0x1, "8f281b8e433170908a222268f6b0fe49ddb9e43c5407031f9d4a78541717d87ec01b8d97e3e31ead8b2ea78ff3e8610811e9c69a71cf319a6331d04a452ddc12026273bde3bb2e28dc7f28b8440b6e86262270480e2aba7ca3168de5d133e0d5325d4dddb8ffd39c5b5a2e8dbe2e31f370ed845e929cfddf5c2189302796ab8bd3690aa597b864ecfdc25c13c1f208b04817fd129bed2085f18b0a7031f0b18c812849cf998dd2668984b51066e6a899034076d886219b17c6cfd0f356efe625e2aebfad65fc1a264ecefac1c38458477292b39713"}}, @ht={0x2d, 0x1a, {0x2000, 0x3, 0x6, 0x0, {0x65, 0x5, 0x0, 0x5}, 0x8, 0xf2, 0x1}}, @random_vendor={0xdd, 0xaa, "8d566b76f1618e0a60950994f25ab5bcd39ef45091ff06be3322768931a1d7722c95aca73abfdcc0f13efee020dfb67925453ecafa423a311bafb85fafc269e5c93e18d34337bfd787334629882e3414e03a1b083255976851729afbd133a9bd16ec8c4a43d0f9e09c8bd853aea1ef76c8df05b29eee18818ab95a86cc35203ffefcfe35d7763068e1c451f25ee17048aa5b3adfafef62817242c333316c7626e1bf490a9706ad83ded3"}, @random={0x7f, 0x90, "416bd0ae20d093d7f62b06ba62d43895002763343f25b0efa06326bacef40747fdaf84af36fd0802eac071d0492c3cf7601cbc6c861c1b2139f81625218d6acf2cb21295bac795a9fcaec9ffdc9dc1684c25f11f229dfbfe6512af5637f36bd9ede59c549148abc01d0e9db6f4c14cad92f120896a9ed457e9212f7ba81c55676aa2157051e1c6a809dd594756d5be5e"}, @challenge={0x10, 0x1, 0x9b}, @fast_bss_trans={0x37, 0xa8, {0x93, 0x5, "42819c906b6f9b308b4ed25f598e331f", "83df097edef0e035ecbd7c7f32a5d80ac962254a22df3c52a798294adf7a001a", "3e42fa5dfcbe27b4424045fc568a520c5f1d195d135f37400b128fc594dec01f", [{0x1, 0x3, "c9f91e"}, {0x2, 0x5, "926dbdf8ed"}, {0x1, 0x16, "047dbfe8fa8809d7ac4c3c374bddc0e81845d9653937"}, {0x2, 0x7, "27fb54fe3ca3dd"}, {0x2, 0x27, "0fdcf5f280c1be12d8f5437974faa616d517cdd75e84eca56c63b2d6340e63bf7df6f42cdc60fa"}]}}, @rann={0x7e, 0x15, {{0x0, 0x9}, 0x8, 0x8, @device_b, 0xffff8001, 0x3, 0x10001}}, @ibss={0x6, 0x2, 0xff}, @mesh_chsw={0x76, 0x6, {0x99, 0x90, 0x16, 0x3f}}]}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="3326c90779fa"}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x80, 0x1, 0x1, 0x0, {0xa9f2, 0x8, 0x0, 0x1f, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x1637, 0x3f}}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a94ab7e0d200"}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xe000, {0xb02d, 0x1, 0xa9c, 0x8}}}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, 0x380}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 18:56:36 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12a00040}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x380, r0, 0x10, 0x70bd29, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe9, 0x2d}}}}, [@NL80211_ATTR_IE={0x308, 0x2a, [@tim={0x5, 0xd8, {0x8, 0xbf, 0x1, "8f281b8e433170908a222268f6b0fe49ddb9e43c5407031f9d4a78541717d87ec01b8d97e3e31ead8b2ea78ff3e8610811e9c69a71cf319a6331d04a452ddc12026273bde3bb2e28dc7f28b8440b6e86262270480e2aba7ca3168de5d133e0d5325d4dddb8ffd39c5b5a2e8dbe2e31f370ed845e929cfddf5c2189302796ab8bd3690aa597b864ecfdc25c13c1f208b04817fd129bed2085f18b0a7031f0b18c812849cf998dd2668984b51066e6a899034076d886219b17c6cfd0f356efe625e2aebfad65fc1a264ecefac1c38458477292b39713"}}, @ht={0x2d, 0x1a, {0x2000, 0x3, 0x6, 0x0, {0x65, 0x5, 0x0, 0x5}, 0x8, 0xf2, 0x1}}, @random_vendor={0xdd, 0xaa, "8d566b76f1618e0a60950994f25ab5bcd39ef45091ff06be3322768931a1d7722c95aca73abfdcc0f13efee020dfb67925453ecafa423a311bafb85fafc269e5c93e18d34337bfd787334629882e3414e03a1b083255976851729afbd133a9bd16ec8c4a43d0f9e09c8bd853aea1ef76c8df05b29eee18818ab95a86cc35203ffefcfe35d7763068e1c451f25ee17048aa5b3adfafef62817242c333316c7626e1bf490a9706ad83ded3"}, @random={0x7f, 0x90, "416bd0ae20d093d7f62b06ba62d43895002763343f25b0efa06326bacef40747fdaf84af36fd0802eac071d0492c3cf7601cbc6c861c1b2139f81625218d6acf2cb21295bac795a9fcaec9ffdc9dc1684c25f11f229dfbfe6512af5637f36bd9ede59c549148abc01d0e9db6f4c14cad92f120896a9ed457e9212f7ba81c55676aa2157051e1c6a809dd594756d5be5e"}, @challenge={0x10, 0x1, 0x9b}, @fast_bss_trans={0x37, 0xa8, {0x93, 0x5, "42819c906b6f9b308b4ed25f598e331f", "83df097edef0e035ecbd7c7f32a5d80ac962254a22df3c52a798294adf7a001a", "3e42fa5dfcbe27b4424045fc568a520c5f1d195d135f37400b128fc594dec01f", [{0x1, 0x3, "c9f91e"}, {0x2, 0x5, "926dbdf8ed"}, {0x1, 0x16, "047dbfe8fa8809d7ac4c3c374bddc0e81845d9653937"}, {0x2, 0x7, "27fb54fe3ca3dd"}, {0x2, 0x27, "0fdcf5f280c1be12d8f5437974faa616d517cdd75e84eca56c63b2d6340e63bf7df6f42cdc60fa"}]}}, @rann={0x7e, 0x15, {{0x0, 0x9}, 0x8, 0x8, @device_b, 0xffff8001, 0x3, 0x10001}}, @ibss={0x6, 0x2, 0xff}, @mesh_chsw={0x76, 0x6, {0x99, 0x90, 0x16, 0x3f}}]}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="3326c90779fa"}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x80, 0x1, 0x1, 0x0, {0xa9f2, 0x8, 0x0, 0x1f, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x1637, 0x3f}}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a94ab7e0d200"}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xe000, {0xb02d, 0x1, 0xa9c, 0x8}}}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, 0x380}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12a00040}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x380, r0, 0x10, 0x70bd29, 0x2, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe9, 0x2d}}}}, [@NL80211_ATTR_IE={0x308, 0x2a, [@tim={0x5, 0xd8, {0x8, 0xbf, 0x1, "8f281b8e433170908a222268f6b0fe49ddb9e43c5407031f9d4a78541717d87ec01b8d97e3e31ead8b2ea78ff3e8610811e9c69a71cf319a6331d04a452ddc12026273bde3bb2e28dc7f28b8440b6e86262270480e2aba7ca3168de5d133e0d5325d4dddb8ffd39c5b5a2e8dbe2e31f370ed845e929cfddf5c2189302796ab8bd3690aa597b864ecfdc25c13c1f208b04817fd129bed2085f18b0a7031f0b18c812849cf998dd2668984b51066e6a899034076d886219b17c6cfd0f356efe625e2aebfad65fc1a264ecefac1c38458477292b39713"}}, @ht={0x2d, 0x1a, {0x2000, 0x3, 0x6, 0x0, {0x65, 0x5, 0x0, 0x5}, 0x8, 0xf2, 0x1}}, @random_vendor={0xdd, 0xaa, "8d566b76f1618e0a60950994f25ab5bcd39ef45091ff06be3322768931a1d7722c95aca73abfdcc0f13efee020dfb67925453ecafa423a311bafb85fafc269e5c93e18d34337bfd787334629882e3414e03a1b083255976851729afbd133a9bd16ec8c4a43d0f9e09c8bd853aea1ef76c8df05b29eee18818ab95a86cc35203ffefcfe35d7763068e1c451f25ee17048aa5b3adfafef62817242c333316c7626e1bf490a9706ad83ded3"}, @random={0x7f, 0x90, "416bd0ae20d093d7f62b06ba62d43895002763343f25b0efa06326bacef40747fdaf84af36fd0802eac071d0492c3cf7601cbc6c861c1b2139f81625218d6acf2cb21295bac795a9fcaec9ffdc9dc1684c25f11f229dfbfe6512af5637f36bd9ede59c549148abc01d0e9db6f4c14cad92f120896a9ed457e9212f7ba81c55676aa2157051e1c6a809dd594756d5be5e"}, @challenge={0x10, 0x1, 0x9b}, @fast_bss_trans={0x37, 0xa8, {0x93, 0x5, "42819c906b6f9b308b4ed25f598e331f", "83df097edef0e035ecbd7c7f32a5d80ac962254a22df3c52a798294adf7a001a", "3e42fa5dfcbe27b4424045fc568a520c5f1d195d135f37400b128fc594dec01f", [{0x1, 0x3, "c9f91e"}, {0x2, 0x5, "926dbdf8ed"}, {0x1, 0x16, "047dbfe8fa8809d7ac4c3c374bddc0e81845d9653937"}, {0x2, 0x7, "27fb54fe3ca3dd"}, {0x2, 0x27, "0fdcf5f280c1be12d8f5437974faa616d517cdd75e84eca56c63b2d6340e63bf7df6f42cdc60fa"}]}}, @rann={0x7e, 0x15, {{0x0, 0x9}, 0x8, 0x8, @device_b, 0xffff8001, 0x3, 0x10001}}, @ibss={0x6, 0x2, 0xff}, @mesh_chsw={0x76, 0x6, {0x99, 0x90, 0x16, 0x3f}}]}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="3326c90779fa"}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x80, 0x1, 0x1, 0x0, {0xa9f2, 0x8, 0x0, 0x1f, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x1637, 0x3f}}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a94ab7e0d200"}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xe000, {0xb02d, 0x1, 0xa9c, 0x8}}}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, 0x380}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) 18:56:36 executing program 3: syz_clone(0x44040000, 0x0, 0x2000000, 0x0, 0x0, 0x0) 18:56:36 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xc0, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x8}, 0x14}}, 0x0) 18:56:36 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000000)={0x1, 0x3, 0x7fff}) 18:56:36 executing program 4: syz_clone(0x44040000, 0x0, 0xec020000, 0x0, 0x0, 0x0) 18:56:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x9}, 0x14}}, 0x0) 18:56:36 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xc0, 0x3, 0x2, 0x5}, 0x14}}, 0x0) 18:56:36 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000000)={0x1, 0x3, 0x7fff}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000000)={0x1, 0x3, 0x7fff}) (async) 18:56:36 executing program 5: syz_clone(0x44040000, 0x0, 0xd8000000, 0x0, 0x0, 0x0) 18:56:36 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000000)={0x1, 0x3, 0x7fff}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000000)={0x1, 0x3, 0x7fff}) (async) 18:56:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, 0x0, 0x0) 18:56:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0xe}, 0x14}}, 0x0) 18:56:36 executing program 3: syz_clone(0x44040000, 0x0, 0x3000000, 0x0, 0x0, 0x0) 18:56:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, 0x0, 0x0) 18:56:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0xf}, 0x14}}, 0x0) 18:56:36 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, &(0x7f0000000040)="ed67b3c095c4a4f5d920b77e252dca636a17d3b64d507d0d68dd2add5a1d70929c3c", 0x22, 0x4000880, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 18:56:36 executing program 4: syz_clone(0x44040000, 0x0, 0xf0ffffff, 0x0, 0x0, 0x0) 18:56:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, 0x0, 0x0) 18:56:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x60}, 0x14}}, 0x0) 18:56:36 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, &(0x7f0000000040)="ed67b3c095c4a4f5d920b77e252dca636a17d3b64d507d0d68dd2add5a1d70929c3c", 0x22, 0x4000880, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) sendto$rose(r0, &(0x7f0000000040)="ed67b3c095c4a4f5d920b77e252dca636a17d3b64d507d0d68dd2add5a1d70929c3c", 0x22, 0x4000880, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) (async) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000000)) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) 18:56:36 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, &(0x7f0000000040)="ed67b3c095c4a4f5d920b77e252dca636a17d3b64d507d0d68dd2add5a1d70929c3c", 0x22, 0x4000880, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1775.068902][T24763] binder: 24762:24763 ioctl c00c620f 20000000 returned -22 18:56:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 18:56:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0xf0}, 0x14}}, 0x0) 18:56:37 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, &(0x7f0000000040)="ed67b3c095c4a4f5d920b77e252dca636a17d3b64d507d0d68dd2add5a1d70929c3c", 0x22, 0x4000880, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 18:56:37 executing program 3: syz_clone(0x44040000, 0x0, 0x4000000, 0x0, 0x0, 0x0) 18:56:37 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, &(0x7f0000000040)="ed67b3c095c4a4f5d920b77e252dca636a17d3b64d507d0d68dd2add5a1d70929c3c", 0x22, 0x4000880, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 1775.148987][T24772] binder: 24768:24772 ioctl c00c620f 20000000 returned -22 [ 1775.153076][T24777] binder: 24769:24777 ioctl c00c620f 20000000 returned -22 18:56:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 18:56:37 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 1775.223477][T24784] binder: 24783:24784 ioctl c00c620f 20000000 returned -22 [ 1775.261971][T24788] binder: 24787:24788 ioctl c00c620f 20000000 returned -22 18:56:37 executing program 4: syz_clone(0x44040000, 0x0, 0xf4030000, 0x0, 0x0, 0x0) 18:56:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 18:56:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x300}, 0x14}}, 0x0) 18:56:37 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, &(0x7f0000000040)="ed67b3c095c4a4f5d920b77e252dca636a17d3b64d507d0d68dd2add5a1d70929c3c", 0x22, 0x4000880, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 18:56:37 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x900}, 0x14}}, 0x0) 18:56:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18:56:37 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 1775.340252][T24800] binder: 24798:24800 ioctl c00c620f 20000000 returned -22 18:56:37 executing program 3: syz_clone(0x44040000, 0x0, 0x4030000, 0x0, 0x0, 0x0) 18:56:37 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, &(0x7f0000000040)="ed67b3c095c4a4f5d920b77e252dca636a17d3b64d507d0d68dd2add5a1d70929c3c", 0x22, 0x4000880, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 18:56:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18:56:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0xe00}, 0x14}}, 0x0) 18:56:37 executing program 4: syz_clone(0x44040000, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0) 18:56:37 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r1, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r6}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x40, 0x0, 0x500, 0x70bd25, 0x25dfdbfa, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "9099f23a23f3b9aecf2bccf17254fc"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c094}, 0x200080c0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x1}) write$cgroup_devices(r1, &(0x7f00000000c0)={'a', ' *:* ', 'rm\x00'}, 0x9) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x42a00, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18:56:37 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, &(0x7f0000000040)="ed67b3c095c4a4f5d920b77e252dca636a17d3b64d507d0d68dd2add5a1d70929c3c", 0x22, 0x4000880, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 18:56:37 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r1, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r6}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x40, 0x0, 0x500, 0x70bd25, 0x25dfdbfa, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "9099f23a23f3b9aecf2bccf17254fc"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c094}, 0x200080c0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x1}) write$cgroup_devices(r1, &(0x7f00000000c0)={'a', ' *:* ', 'rm\x00'}, 0x9) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x42a00, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) syz_io_uring_complete(0x0) (async) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) (async) read$fb(r1, &(0x7f0000000040)=""/38, 0x26) (async) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r6}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x40, 0x0, 0x500, 0x70bd25, 0x25dfdbfa, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "9099f23a23f3b9aecf2bccf17254fc"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c094}, 0x200080c0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x1}) (async) write$cgroup_devices(r1, &(0x7f00000000c0)={'a', ' *:* ', 'rm\x00'}, 0x9) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x42a00, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) 18:56:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0xf00}, 0x14}}, 0x0) 18:56:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xc0}, 0x14}}, 0x0) 18:56:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x2000}, 0x14}}, 0x0) 18:56:37 executing program 3: syz_clone(0x44040000, 0x0, 0x5000000, 0x0, 0x0, 0x0) 18:56:37 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, &(0x7f0000000040)="ed67b3c095c4a4f5d920b77e252dca636a17d3b64d507d0d68dd2add5a1d70929c3c", 0x22, 0x4000880, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 18:56:37 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r1, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r6}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x40, 0x0, 0x500, 0x70bd25, 0x25dfdbfa, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "9099f23a23f3b9aecf2bccf17254fc"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c094}, 0x200080c0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x1}) write$cgroup_devices(r1, &(0x7f00000000c0)={'a', ' *:* ', 'rm\x00'}, 0x9) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x42a00, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async) syz_io_uring_complete(0x0) (async) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) (async) read$fb(r1, &(0x7f0000000040)=""/38, 0x26) (async) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r6}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x40, 0x0, 0x500, 0x70bd25, 0x25dfdbfa, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "9099f23a23f3b9aecf2bccf17254fc"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c094}, 0x200080c0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x1}) (async) write$cgroup_devices(r1, &(0x7f00000000c0)={'a', ' *:* ', 'rm\x00'}, 0x9) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x42a00, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) 18:56:37 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r1, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r6}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x40, 0x0, 0x500, 0x70bd25, 0x25dfdbfa, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "9099f23a23f3b9aecf2bccf17254fc"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c094}, 0x200080c0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x1}) write$cgroup_devices(r1, &(0x7f00000000c0)={'a', ' *:* ', 'rm\x00'}, 0x9) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x42a00, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:37 executing program 4: syz_clone(0x44040000, 0x0, 0xf8030000, 0x0, 0x0, 0x0) 18:56:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x4a6d}, 0x14}}, 0x0) 18:56:37 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, &(0x7f0000000040)="ed67b3c095c4a4f5d920b77e252dca636a17d3b64d507d0d68dd2add5a1d70929c3c", 0x22, 0x4000880, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 18:56:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x6000}, 0x14}}, 0x0) 18:56:37 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r1, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r6}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x40, 0x0, 0x500, 0x70bd25, 0x25dfdbfa, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "9099f23a23f3b9aecf2bccf17254fc"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c094}, 0x200080c0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x1}) write$cgroup_devices(r1, &(0x7f00000000c0)={'a', ' *:* ', 'rm\x00'}, 0x9) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x42a00, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:37 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:37 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, &(0x7f0000000040)="ed67b3c095c4a4f5d920b77e252dca636a17d3b64d507d0d68dd2add5a1d70929c3c", 0x22, 0x4000880, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 18:56:37 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8) (async, rerun: 64) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (rerun: 64) [ 1775.732696][T24876] binder: 24874:24876 ioctl 4c09 8 returned -22 18:56:37 executing program 3: syz_clone(0x44040000, 0x0, 0x6000000, 0x0, 0x0, 0x0) 18:56:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x6d4a}, 0x14}}, 0x0) 18:56:37 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r1, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r6}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x40, 0x0, 0x500, 0x70bd25, 0x25dfdbfa, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "9099f23a23f3b9aecf2bccf17254fc"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c094}, 0x200080c0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x1}) write$cgroup_devices(r1, &(0x7f00000000c0)={'a', ' *:* ', 'rm\x00'}, 0x9) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x42a00, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:37 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendto$rose(r0, &(0x7f0000000040)="ed67b3c095c4a4f5d920b77e252dca636a17d3b64d507d0d68dd2add5a1d70929c3c", 0x22, 0x4000880, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) [ 1775.791529][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.791600][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.791670][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 18:56:37 executing program 4: syz_clone(0x44040000, 0x0, 0xfa030000, 0x0, 0x0, 0x0) 18:56:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0xf000}, 0x14}}, 0x0) 18:56:37 executing program 5: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:37 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r0, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r5}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x40, 0x0, 0x500, 0x70bd25, 0x25dfdbfa, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "9099f23a23f3b9aecf2bccf17254fc"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c094}, 0x200080c0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x1}) write$cgroup_devices(r0, &(0x7f00000000c0)={'a', ' *:* ', 'rm\x00'}, 0x9) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x42a00, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) 18:56:37 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) [ 1775.791738][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.791809][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.791878][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.791942][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 18:56:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x34000}, 0x14}}, 0x0) 18:56:37 executing program 1: ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)=0xaeb5) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 1775.792021][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 18:56:37 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 1775.792088][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.792158][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.792230][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 18:56:37 executing program 3: syz_clone(0x44040000, 0x0, 0x7000000, 0x0, 0x0, 0x0) 18:56:37 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r0, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r5}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x40, 0x0, 0x500, 0x70bd25, 0x25dfdbfa, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "9099f23a23f3b9aecf2bccf17254fc"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c094}, 0x200080c0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x1}) write$cgroup_devices(r0, &(0x7f00000000c0)={'a', ' *:* ', 'rm\x00'}, 0x9) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x42a00, 0x0) 18:56:37 executing program 1: ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)=0xaeb5) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)=0xaeb5) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) 18:56:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x400300}, 0x14}}, 0x0) 18:56:37 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:37 executing program 4: syz_clone(0x44040000, 0x0, 0xfbffffff, 0x0, 0x0, 0x0) [ 1775.792300][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.792367][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.792435][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.792507][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.792578][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 18:56:37 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:37 executing program 1: ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)=0xaeb5) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0xf0ffff}, 0x14}}, 0x0) 18:56:37 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r0, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r5}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x40, 0x0, 0x500, 0x70bd25, 0x25dfdbfa, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "9099f23a23f3b9aecf2bccf17254fc"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c094}, 0x200080c0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x1}) write$cgroup_devices(r0, &(0x7f00000000c0)={'a', ' *:* ', 'rm\x00'}, 0x9) [ 1775.792649][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.792721][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.792792][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 18:56:38 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x1000000}, 0x14}}, 0x0) [ 1775.792863][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.792935][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.793011][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.793082][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.793155][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.793224][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.793298][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.793369][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.793443][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.793515][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.793586][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.793656][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.793723][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.793793][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 18:56:38 executing program 3: syz_clone(0x44040000, 0x0, 0x8000000, 0x0, 0x0, 0x0) 18:56:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r2, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x10, 0x2a, [@chsw_timing={0x68, 0x4, {0x1, 0x1f}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x78, 0x68}}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x28}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1f}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 18:56:38 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x2000000}, 0x14}}, 0x0) 18:56:38 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r0, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r5}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x40, 0x0, 0x500, 0x70bd25, 0x25dfdbfa, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "9099f23a23f3b9aecf2bccf17254fc"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c094}, 0x200080c0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x1}) 18:56:38 executing program 4: syz_clone(0x44040000, 0x0, 0xfcffffff, 0x0, 0x0, 0x0) [ 1775.793865][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.793933][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.794010][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.818909][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 18:56:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r2, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x10, 0x2a, [@chsw_timing={0x68, 0x4, {0x1, 0x1f}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x78, 0x68}}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x28}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1f}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x14) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 18:56:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x3000000}, 0x14}}, 0x0) [ 1775.818997][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 18:56:38 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 1775.819066][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.819136][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.819207][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 18:56:38 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r0, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r5}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x40, 0x0, 0x500, 0x70bd25, 0x25dfdbfa, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "9099f23a23f3b9aecf2bccf17254fc"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c094}, 0x200080c0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) 18:56:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x4000000}, 0x14}}, 0x0) 18:56:38 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 1775.819274][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.819350][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.819417][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.819486][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.819552][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.819620][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.819687][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 18:56:38 executing program 3: syz_clone(0x44040000, 0x0, 0xa000000, 0x0, 0x0, 0x0) 18:56:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r2, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x10, 0x2a, [@chsw_timing={0x68, 0x4, {0x1, 0x1f}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0x78, 0x68}}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x28}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x1f}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x14) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) (async, rerun: 64) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 18:56:38 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x8000000}, 0x14}}, 0x0) 18:56:38 executing program 4: syz_clone(0x44040000, 0x0, 0xfd010000, 0x0, 0x0, 0x0) 18:56:38 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r0, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r5}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x40, 0x0, 0x500, 0x70bd25, 0x25dfdbfa, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "9099f23a23f3b9aecf2bccf17254fc"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c094}, 0x200080c0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) [ 1775.819753][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.819823][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.819893][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 18:56:38 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x9000000}, 0x14}}, 0x0) [ 1775.839127][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.839212][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.839280][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 18:56:38 executing program 1: syz_clone(0x11180000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:38 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 18:56:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0xe000000}, 0x14}}, 0x0) [ 1775.839354][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.839431][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.839491][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.839551][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 18:56:38 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r0, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r5}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x40, 0x0, 0x500, 0x70bd25, 0x25dfdbfa, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "9099f23a23f3b9aecf2bccf17254fc"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c094}, 0x200080c0) [ 1775.839617][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.839687][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.839757][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.839831][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.839900][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.839977][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.840046][T24882] binder: 24881:24882 ioctl 4c09 8 returned -22 [ 1775.906978][T24897] binder: 24896:24897 ioctl 4c09 8 returned -22 [ 1775.907856][T24898] binder: 24896:24898 ioctl 4c09 8 returned -22 [ 1775.949939][T24905] binder: 24902:24905 ioctl c00c620f 20000000 returned -22 18:56:38 executing program 3: syz_clone(0x44040000, 0x0, 0xe030000, 0x0, 0x0, 0x0) 18:56:38 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r0, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r4}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) 18:56:38 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 18:56:38 executing program 1: syz_clone(0x11180000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:56:38 executing program 4: syz_clone(0x44040000, 0x0, 0xfeffffff, 0x0, 0x0, 0x0) 18:56:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0xf000000}, 0x14}}, 0x0) 18:56:38 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 18:56:38 executing program 1: syz_clone(0x11180000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) syz_clone(0x11180000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) [ 1775.994980][T24911] binder: 24910:24911 ioctl c00c620f 20000000 returned -22 [ 1776.355403][T24953] binder: 24945:24953 ioctl c00c620f 20000000 returned -22 [ 1776.653454][T24990] binder: 24989:24990 ioctl c00c620f 0 returned -14 18:56:38 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r0, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) 18:56:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x20000000}, 0x14}}, 0x0) 18:56:38 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r0, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r4}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) 18:56:38 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r0, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) [ 1776.745235][T25000] binder: 24999:25000 ioctl c00c620f 0 returned -14 [ 1776.856481][T25009] binder: 25005:25009 ioctl c00c620f 0 returned -14 [ 1776.920469][T25020] binder: 25017:25020 ioctl c00c620f 0 returned -14 18:56:38 executing program 3: syz_clone(0x44040000, 0x0, 0x10000200, 0x0, 0x0, 0x0) 18:56:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x60000000}, 0x14}}, 0x0) 18:56:38 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, &(0x7f0000000000)=0x20000) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x8000) 18:56:38 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r0, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) 18:56:38 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r0, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) 18:56:38 executing program 4: syz_clone(0x44040000, 0x0, 0xffff0300, 0x0, 0x0, 0x0) 18:56:38 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r0, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) 18:56:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x6d4a0000}, 0x14}}, 0x0) 18:56:38 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) ioctl$IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, &(0x7f0000000000)=0x20000) (async) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x8000) 18:56:38 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r0, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) 18:56:38 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r0, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) 18:56:38 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) ioctl$IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, &(0x7f0000000000)=0x20000) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x8000) 18:56:39 executing program 3: syz_clone(0x44040000, 0x0, 0x11000000, 0x0, 0x0, 0x0) 18:56:39 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r0, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) 18:56:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0x9effffff}, 0x14}}, 0x0) 18:56:39 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r0, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) 18:56:39 executing program 4: syz_clone(0x44040000, 0x0, 0xffffc000, 0x0, 0x0, 0x0) 18:56:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0xf0ffffff}, 0x14}}, 0x0) 18:56:39 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r0, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) 18:56:39 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r0, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 18:56:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0xf5ffffff}, 0x14}}, 0x0) 18:56:39 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r0, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x27}, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x34}}, 0x0) 18:56:39 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_io_uring_complete(0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffffa1, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x28800}, 0x24040881) read$fb(r0, &(0x7f0000000040)=""/38, 0x26) socketpair(0x28, 0x6, 0x80, &(0x7f0000000100)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 18:56:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5, 0xfcffffff}, 0x14}}, 0x0) 18:56:39 executing program 3: syz_clone(0x44040000, 0x0, 0x1a030000, 0x0, 0x0, 0x0) 18:56:39 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = syz_io_uring_complete(0x